General
- Target Client-built.exe
- Size 2.6MB
- Sample260822-evsdtaeq3w
- SHA256 8abbbd5b09c97b43027817523dbe5cd7450a767150922ed50732d740e5c94560
- MD5 b5b600a0bf298b279c7605dbcb81eb36
- SHA1 8e0690726f1f13c130e1c6568d1b0a654ea8c0ac
- SHA512 b797a187782d1bdcc8261f415ebc3afbca0b03590ac83be1e218f414dc48b8b6b622ace2683643e8b7ae400ab4f9178237a1d6b4563718060692e6aac067fea9
- SSDEEP 49152:zPu6NLPxi8/N+ZZXZQOLHM7wRPirm2NnPTKKm77LrwCB6uanzq:bu6tpi8VIxpL7oZNn2Km77LrwkFWz
- TLSH T11DC5F01077F9810AF3BF1BB9ABB6148D1B77B5039A79D38F1888449D0EA33909E51763
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
quasar
Version
-
1.6.6
Botnet
-
RATS
C2
-
luije-40835.portmap.host:40835
Mutex
-
e7635f8e-07f7-4cbb-9645-cc50408defab
Attributes
-
encryption_key
7799F230382DEC15CFC54F1D560B5A8B875621D2
-
install_name
.exe
-
key_salt
5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382
-
reconnect_delay
3000
Targets
-
- Target Client-built.exe
- Size 2.6MB
- SHA256 8abbbd5b09c97b43027817523dbe5cd7450a767150922ed50732d740e5c94560
- MD5 b5b600a0bf298b279c7605dbcb81eb36
- SHA1 8e0690726f1f13c130e1c6568d1b0a654ea8c0ac
- SHA512 b797a187782d1bdcc8261f415ebc3afbca0b03590ac83be1e218f414dc48b8b6b622ace2683643e8b7ae400ab4f9178237a1d6b4563718060692e6aac067fea9
- SSDEEP 49152:zPu6NLPxi8/N+ZZXZQOLHM7wRPirm2NnPTKKm77LrwCB6uanzq:bu6tpi8VIxpL7oZNn2Km77LrwkFWz
- TLSH T11DC5F01077F9810AF3BF1BB9ABB6148D1B77B5039A79D38F1888449D0EA33909E51763
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Quasar payload