General
- Target Nat2Client.exe
- Size 5.3MB
- Sample261018-we1tpafv7l
- SHA256 85ef91c48cefd9dd54044815bb24604adc8530c8efb3d328576be074fa549ee5
- MD5 2790960ef318eac2ebe9a54973053bb3
- SHA1 70f48cb436d9cd7ec3692ab5f6950543e95752fd
- SHA512 32052ed403a08ece481806c6cf9849309aa90e7b36989c04a172eff35c7b0464caa01f8a6210cb9b134ae77eb9fd11882803e108ca0d6361454ffc2f4a06cbed
- SSDEEP 49152:c10ny9eNcROgd0ndewOQni8zbi5/V1OhJ4+JzUPD2iVsjacgnqbQke+kreCCVbdV:cnAcRZd0k0hJGsMnqkzh
- TLSH T1D1469E14FBF84A67D26FC274D1B14422A7F1F85EA323D79B258196792E23BC08D12727
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Nat2Client.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
quasar
Botnet
-
�X���Sr
Attributes
-
encryption_key
AD3C71CCA7ABB4B3A0A93151B7732A06AA4E92F6
-
key_salt
5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382
-
reconnect_delay
3000
Targets
-
- Target Nat2Client.exe
- Size 5.3MB
- SHA256 85ef91c48cefd9dd54044815bb24604adc8530c8efb3d328576be074fa549ee5
- MD5 2790960ef318eac2ebe9a54973053bb3
- SHA1 70f48cb436d9cd7ec3692ab5f6950543e95752fd
- SHA512 32052ed403a08ece481806c6cf9849309aa90e7b36989c04a172eff35c7b0464caa01f8a6210cb9b134ae77eb9fd11882803e108ca0d6361454ffc2f4a06cbed
- SSDEEP 49152:c10ny9eNcROgd0ndewOQni8zbi5/V1OhJ4+JzUPD2iVsjacgnqbQke+kreCCVbdV:cnAcRZd0k0hJGsMnqkzh
- TLSH T1D1469E14FBF84A67D26FC274D1B14422A7F1F85EA323D79B258196792E23BC08D12727
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Quasar payload