quasar | fdb6bdd36b6dd8910ccfacefeab116a303db885a7125d893151a2ba9e00746d1 | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
1212.bin
Size 341KB
Sample220712-n2vxysbgc6
SHA256 fdb6bdd36b6dd8910ccfacefeab116a303db885a7125d893151a2ba9e00746d1
MD5 4eba2ba2d24a53ec1233d6697ebdd02a
SHA1 000651d139d8f9ab80b1c22536ad1795f31f0bb9
SHA512 0a44e2bdec6e103868dd39b358dcdce435093789b6f1d242cce9b900dbfdd84a86a1fe919fed8b0a241c9cb2777c1935f9cb8e6d2b1f5d335cf0755404af4efe
MD5 SHA1 SHA512

Score

10^/10

quasar spyware suricata trojan

Malware Config

Targets

- Target
  1212.bin
- Size 341KB
- SHA256 fdb6bdd36b6dd8910ccfacefeab116a303db885a7125d893151a2ba9e00746d1
- MD5 4eba2ba2d24a53ec1233d6697ebdd02a
- SHA1 000651d139d8f9ab80b1c22536ad1795f31f0bb9
- SHA512 0a44e2bdec6e103868dd39b358dcdce435093789b6f1d242cce9b900dbfdd84a86a1fe919fed8b0a241c9cb2777c1935f9cb8e6d2b1f5d335cf0755404af4efe
- MD5 SHA1 SHA512
Score

10^/10

quasar spyware suricata trojan
- Quasar RAT
  Quasar is an open source Remote Access Tool.
  trojan spyware quasar
- suricata: ET MALWARE Common RAT Connectivity Check Observed
  suricata: ET MALWARE Common RAT Connectivity Check Observed
  suricata
- Executes dropped EXE
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

quasarspywaresuricatatrojan

behavioral2