General
- Target Client-built.exe
- Size 3.1MB
- Sample261026-s8n57sez31
- SHA256 9bf15efe137f4a0f8e70daf728aae78be233be05dcb326264769c59818e4cafa
- MD5 7478257fa96d158e9dfc1beb8bdba2f9
- SHA1 061ee8c91187e2d9cd4de83f1ab865e2a376d5e7
- SHA512 ba67b528ef9907809fceed9fd98e9e951cb12521a9a794bff71db0324cbbd11450e3e11f0e80755fb05bbc3e45b8a063144036563da36a28fead0813d27ce07e
- SSDEEP 49152:MF8ogFhr0CGJB+hAsHnzauoIfzgumhbI74YmhxO2CTIP3np9f/v/IdvBvMp:MTchzi+h5WunMpnTA2CkHWSp
- TLSH T15CE5337B1F131979E45C863806D01A039FD0F82BB87F50766C6B5B676D39860B6282FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Client-built.exe
Resource
win10v2004-20260911-en
9 signatures
30 seconds
Behavioral task
behavioral2
Sample
Client-built.exe
Resource
win11ltsc2024-20260911-en
4 signatures
30 seconds
Malware Config
Extracted
Family
-
quasar
Attributes
-
encryption_key
8837AC874C2147538C9EB9CDCE073995D16261C3
-
install_name
�x>0C��
-
key_salt
5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382
-
reconnect_delay
3000
Targets
-
- Target Client-built.exe
- Size 3.1MB
- SHA256 9bf15efe137f4a0f8e70daf728aae78be233be05dcb326264769c59818e4cafa
- MD5 7478257fa96d158e9dfc1beb8bdba2f9
- SHA1 061ee8c91187e2d9cd4de83f1ab865e2a376d5e7
- SHA512 ba67b528ef9907809fceed9fd98e9e951cb12521a9a794bff71db0324cbbd11450e3e11f0e80755fb05bbc3e45b8a063144036563da36a28fead0813d27ce07e
- SSDEEP 49152:MF8ogFhr0CGJB+hAsHnzauoIfzgumhbI74YmhxO2CTIP3np9f/v/IdvBvMp:MTchzi+h5WunMpnTA2CkHWSp
- TLSH T15CE5337B1F131979E45C863806D01A039FD0F82BB87F50766C6B5B676D39860B6282FE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Quasar payload
Executes dropped EXE