Overview

overview

10

Static

static

3

Client.exe

windows7-x64

10

Client.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client.exe

  • Size

    169KB

  • Sample

    240518-n7gmhsae96

  • MD5

    25291bd76d119ddc6eb07f2fe2fa3488

  • SHA1

    306fbacaf20e9cf43caa3d59e5a0a859932b6652

  • SHA256

    14f9d6d20222a1b9824dd22e6173731b934dfbf1670f8228f740a8a2e3b824f0

  • SHA512

    031ae88bf3b88cd602bbb8a1dbc313d5ce1317cf390116b3115a44e5990e06abdaaa72c8f81f6e63ffe9af78edf36c1dc18d4f5f044143518e8f9e94d14b5706

  • SSDEEP

    3072:NJgG6EsvKxZfa4kDoYuw1bm+cKc8Beaim9bArt1GwSYvTwel:Q1EsIZfaR/K8him9bct1

Score
10/10
quasarspywaretrojan

Malware Config

Targets

    • Target

      Client.exe

    • Size

      169KB

    • MD5

      25291bd76d119ddc6eb07f2fe2fa3488

    • SHA1

      306fbacaf20e9cf43caa3d59e5a0a859932b6652

    • SHA256

      14f9d6d20222a1b9824dd22e6173731b934dfbf1670f8228f740a8a2e3b824f0

    • SHA512

      031ae88bf3b88cd602bbb8a1dbc313d5ce1317cf390116b3115a44e5990e06abdaaa72c8f81f6e63ffe9af78edf36c1dc18d4f5f044143518e8f9e94d14b5706

    • SSDEEP

      3072:NJgG6EsvKxZfa4kDoYuw1bm+cKc8Beaim9bArt1GwSYvTwel:Q1EsIZfaR/K8him9bct1

    Score
    10/10
    quasarspywaretrojan

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks