General

  • Target

    https://github.com/Gismo0666/Roblox-Image-Logger/releases/tag/Roblox-Image-Logger

  • Sample

    240518-zg1s9aef2t

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    1000

Targets

    • Target

      https://github.com/Gismo0666/Roblox-Image-Logger/releases/tag/Roblox-Image-Logger

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

    • Quasar payload

    • Command and Scripting Interpreter: PowerShell

      Run Powershell and hide display window.

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks