General
- Target SYSWOW64.exe
- Size 955KB
- Sample260806-e2hsysshrb
- SHA256 ef74d1c29ee00f4ebc57c52426c2ac194a34f8f0c150443e95fc1d4f2a13403b
- MD5 e674d31a984ec2d8afcaecabc61a1b5a
- SHA1 6fa796f198f3a5c24b86c05c779e550b88b5a42e
- SHA512 151c5985edb9901fe883d56e9c71306f383947f2c3b9718eef1b6bf1ab4b9da67e9e67da8eed006ed50f4176d02211415bc8271999fccfdf1935879688261326
- SSDEEP 24576:qF/phxJzck+uGW/yFoBkkAQWd/k4bmA5mI:qF/phTYjqqanTWdjmum
- TLSH T1DC25D09077F4850AE1FF2B75A4B24D494BF7B9529A36DB4F089890AD1EB3740CE503A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SYSWOW64.exe
Resource
win10v2004-20260513-en
5 signatures
900 seconds
Behavioral task
behavioral2
Sample
SYSWOW64.exe
Resource
win10ltsc2021-20260513-en
5 signatures
900 seconds
Behavioral task
behavioral3
Sample
SYSWOW64.exe
Resource
win11-20260513-en
5 signatures
900 seconds
Malware Config
Extracted
Family
-
quasar
Attributes
-
encryption_key
AFA3CAD4ED1D6F9700536DD60F51307FFEA2892B
-
key_salt
5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382
-
reconnect_delay
3000
Targets
-
- Target SYSWOW64.exe
- Size 955KB
- SHA256 ef74d1c29ee00f4ebc57c52426c2ac194a34f8f0c150443e95fc1d4f2a13403b
- MD5 e674d31a984ec2d8afcaecabc61a1b5a
- SHA1 6fa796f198f3a5c24b86c05c779e550b88b5a42e
- SHA512 151c5985edb9901fe883d56e9c71306f383947f2c3b9718eef1b6bf1ab4b9da67e9e67da8eed006ed50f4176d02211415bc8271999fccfdf1935879688261326
- SSDEEP 24576:qF/phxJzck+uGW/yFoBkkAQWd/k4bmA5mI:qF/phTYjqqanTWdjmum
- TLSH T1DC25D09077F4850AE1FF2B75A4B24D494BF7B9529A36DB4F089890AD1EB3740CE503A3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Quasar payload