Overview

overview

10

Static

static

10

5e5cb9a1be...18.exe

windows7-x64

10

5e5cb9a1be...18.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5e5cb9a1be725bbcfef55f98502d874d_JaffaCakes118

  • Size

    352KB

  • Sample

    240520-lgr98aeb6v

  • MD5

    5e5cb9a1be725bbcfef55f98502d874d

  • SHA1

    543febff0e53c7f5badb97bd0ab9509530eca434

  • SHA256

    f218439bafeb99c3225c252bb9e290a583d674de0890674f7e950376b41fa71e

  • SHA512

    0f5f8b0f27f2833a082d01d705427b7eabe57aa85f720494c37f3284ffe5289f45deb7dc1c26f1c504a721233044af211653fae062e529c773347ac141457283

  • SSDEEP

    6144:um2w+hJKnBOPPeWKYHI/D08bZujC0DF6D2+hB:HaJiOJK5/SjCa6D2+f

Score
10/10
quasarspywaretrojan

Malware Config

Targets

    • Target

      5e5cb9a1be725bbcfef55f98502d874d_JaffaCakes118

    • Size

      352KB

    • MD5

      5e5cb9a1be725bbcfef55f98502d874d

    • SHA1

      543febff0e53c7f5badb97bd0ab9509530eca434

    • SHA256

      f218439bafeb99c3225c252bb9e290a583d674de0890674f7e950376b41fa71e

    • SHA512

      0f5f8b0f27f2833a082d01d705427b7eabe57aa85f720494c37f3284ffe5289f45deb7dc1c26f1c504a721233044af211653fae062e529c773347ac141457283

    • SSDEEP

      6144:um2w+hJKnBOPPeWKYHI/D08bZujC0DF6D2+hB:HaJiOJK5/SjCa6D2+f

    Score
    10/10
    quasarspywaretrojan

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • Quasar payload

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks