General
- Target SYSWOW64.exe
- Size 955KB
- Sample260806-evgx3sff84
- SHA256 debf0c23f118269591f4fca0f9539e345627e3b3f776babffc511f8201d85958
- MD5 175e02db3a9602b57c3daf231d2ee65e
- SHA1 fb59e63b9bd9d7977af330c0571f486e0e508215
- SHA512 12a29cd40f8e220517e41c79d1b176cf059100ceb8c7a3c2423188bd5a7e8206c22f02a5c777a08576cd37b0b1cf1dbf11ebfacea480c3f24a7789367c5bdb43
- SSDEEP 24576:0F/pLxJzck+uGW/yFoBkkAQrHgVNV9Tr/:0F/pLTYjqqanTr8NXr
- TLSH T1D025CF9173F4860BE1FF1B75E4B548094BB7F8129A32DB8F098890AD1EB37418E517A7
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
SYSWOW64.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
SYSWOW64.exe
Resource
win10ltsc2021-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral3
Sample
SYSWOW64.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
quasar
Attributes
-
encryption_key
AFA3CAD4ED1D6F9700536DD60F51307FFEA2892B
-
key_salt
5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382
-
reconnect_delay
3000
Targets
-
- Target SYSWOW64.exe
- Size 955KB
- SHA256 debf0c23f118269591f4fca0f9539e345627e3b3f776babffc511f8201d85958
- MD5 175e02db3a9602b57c3daf231d2ee65e
- SHA1 fb59e63b9bd9d7977af330c0571f486e0e508215
- SHA512 12a29cd40f8e220517e41c79d1b176cf059100ceb8c7a3c2423188bd5a7e8206c22f02a5c777a08576cd37b0b1cf1dbf11ebfacea480c3f24a7789367c5bdb43
- SSDEEP 24576:0F/pLxJzck+uGW/yFoBkkAQrHgVNV9Tr/:0F/pLTYjqqanTr8NXr
- TLSH T1D025CF9173F4860BE1FF1B75E4B548094BB7F8129A32DB8F098890AD1EB37418E517A7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Quasar payload