Overview

overview

10

Static

static

10

02c664aa07...7f.exe

windows7_x64

10

02c664aa07...7f.exe

windows10_x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    02c664aa0793ffb1d10eca08921bc77f

  • Size

    502KB

  • Sample

    210722-rvv6m69e9x

  • MD5

    02c664aa0793ffb1d10eca08921bc77f

  • SHA1

    5c3bed4bed72373b10ead3a492e6a6f2e150e248

  • SHA256

    885c0ee469749be09f9d9290f84338bf2f637c8c15a7a363240f9d2f09522e93

  • SHA512

    38c1d104e06fb4e553e2adc80c80361de193dc424ed30b9f736e75b012a33b5e02b8cccd6b184919219976ffc6fe70a9bc21397375b2a5dda3a9f32abbd62fff

Score
10/10
quasarspecialspywaretrojan

Malware Config

Extracted

Family

quasar

Version

1.4.0

Botnet

Special

C2

107.150.23.186:6265

127.0. 0.1:6265
Mutex

54044b0c-f30c-4ac2-b0aa-6489c8bb3fb4

Attributes
  • encryption_key

    BCD9439930956E212F97B82FD0DE5A50AE4CD054

  • install_name

    update.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    update

  • subdirectory

    6482

Targets

    • Target

      02c664aa0793ffb1d10eca08921bc77f

    • Size

      502KB

    • MD5

      02c664aa0793ffb1d10eca08921bc77f

    • SHA1

      5c3bed4bed72373b10ead3a492e6a6f2e150e248

    • SHA256

      885c0ee469749be09f9d9290f84338bf2f637c8c15a7a363240f9d2f09522e93

    • SHA512

      38c1d104e06fb4e553e2adc80c80361de193dc424ed30b9f736e75b012a33b5e02b8cccd6b184919219976ffc6fe70a9bc21397375b2a5dda3a9f32abbd62fff

    Score
    10/10
    quasarspecialspywaretrojan

    • Quasar Payload

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

1
T1053

Persistence

Scheduled Task

1
T1053

Privilege Escalation

Scheduled Task

1
T1053

Defense Evasion

Credential Access

Discovery

System Information Discovery

1
T1082

Remote System Discovery

1
T1018

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks