General
- Target Client-built.exe
- Size 498KB
- Sample260905-ff6tbsxand
- SHA256 8ef645db3f917f2b80a1b044f0bc9d00d59f3b27472adc388b5a6ead6563e420
- MD5 c54bbc2982625ad4bde945023be4145c
- SHA1 1ce2b061d96be2ae20e6344dc29b05eeb012fe09
- SHA512 e85a7ebda86211605300f2dbd8b8269b709d114dcc6a44a5cfb4d7c271cb65c8ee9661b74b071c4b3b67fe2ab0375a87afa8d611971f96ff910d0a0c2990a1df
- SSDEEP 12288:wi8vsKh5buAKm/KjoGAIGXIyhMmi093Ag:wi8vsMuAKAKFFoIQv93Ag
- TLSH T180B45A1037E8862BE0BE2776A871652557F6F407FB22EB4F4944B1A82C9334D9D44BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Extracted
Family
-
quasar
Attributes
-
encryption_key
A32A37743A2012C2B4D9CF13DEF3C7D5D3AE10FB
-
key_salt
5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382
-
reconnect_delay
3000
Targets
-
- Target Client-built.exe
- Size 498KB
- SHA256 8ef645db3f917f2b80a1b044f0bc9d00d59f3b27472adc388b5a6ead6563e420
- MD5 c54bbc2982625ad4bde945023be4145c
- SHA1 1ce2b061d96be2ae20e6344dc29b05eeb012fe09
- SHA512 e85a7ebda86211605300f2dbd8b8269b709d114dcc6a44a5cfb4d7c271cb65c8ee9661b74b071c4b3b67fe2ab0375a87afa8d611971f96ff910d0a0c2990a1df
- SSDEEP 12288:wi8vsKh5buAKm/KjoGAIGXIyhMmi093Ag:wi8vsMuAKAKFFoIQv93Ag
- TLSH T180B45A1037E8862BE0BE2776A871652557F6F407FB22EB4F4944B1A82C9334D9D44BB3
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Quasar payload
-
Executes dropped EXE