General
- Target Pulsar-Client_crypted.bat
- Size 1.3MB
- Sample260822-bls27st1dw
- SHA256 f93164ba325a0477ff96a171db00f3b9acc81671401310f48f12b51ab27df788
- MD5 c93687a12bd6f5fe2755390fa449e885
- SHA1 c0bf628123b0f6ee86c7d96b083c36a63db7aa47
- SHA512 e2f57ebbf9f90343dba5275abaeffd351f5e685d711135b78901bb27f70eb60e5949d486f0875d58ff962faddaa1b74ebb1fd9740faf8efb5fbfadaca5ac4e42
- SSDEEP 24576:ViNzrwsOTs9Bso9nCqmqDckozW+okG68JbSh5xnvkLhAItqi8Sq/ZP:cws0k9CqBDcJX/GHIhnncpqi8b
- TLSH T1DD5533215F6EAEFE05BDDB37841D2C150EA2CCE691C5A0EFDB5D5A032A9E2830C57C61
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Malware Config
Extracted
Family
-
quasar
Attributes
-
encryption_key
9672CA6EA6B99FD9B22B86EACF1C5F5B70A627C9
-
key_salt
5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382
-
reconnect_delay
3000
Targets
-
- Target Pulsar-Client_crypted.bat
- Size 1.3MB
- SHA256 f93164ba325a0477ff96a171db00f3b9acc81671401310f48f12b51ab27df788
- MD5 c93687a12bd6f5fe2755390fa449e885
- SHA1 c0bf628123b0f6ee86c7d96b083c36a63db7aa47
- SHA512 e2f57ebbf9f90343dba5275abaeffd351f5e685d711135b78901bb27f70eb60e5949d486f0875d58ff962faddaa1b74ebb1fd9740faf8efb5fbfadaca5ac4e42
- SSDEEP 24576:ViNzrwsOTs9Bso9nCqmqDckozW+okG68JbSh5xnvkLhAItqi8Sq/ZP:cws0k9CqBDcJX/GHIhnncpqi8b
- TLSH T1DD5533215F6EAEFE05BDDB37841D2C150EA2CCE691C5A0EFDB5D5A032A9E2830C57C61
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Quasar payload