General

  • Target
    Artic-Tools-main.zip
  • Size 3.3MB
  • Sample240708-dsawbasbnh
  • SHA256 10478f357fce33e3022657700b14d357f727880a2c9f12802f244054a94bfbfd
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • quasar

Version
  • 1.4.1

Botnet
  • Office04

C2
  • 192.168.0.220:4782

Mutex
  • c6c343f8-8382-4a66-9b65-94ac25db16e4

Attributes
  • encryption_key

    E93DA55A12FC3EE59E1A5D2106636D62B1953227

  • install_name

    setup_2.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Quasar Client Startup

  • subdirectory

    SubDir

Targets

    • Target
      Artic-Tools-main/Artic.py
    • Size 8KB
    • SHA256 69bdebfe7415b051349efe38c35d63a02a8161a653f93511fb6bc631b0619a7a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Artic-Tools-main/__pycache__/Xvirus.cpython-312.pyc
    • Size 16KB
    • SHA256 cec5bdd518e260b7f207d8a88b497ccb41349cdba66790710109014359bd67e5
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Artic-Tools-main/setup 2.exe
    • Size 3.1MB
    • SHA256 0ad5d74f21bcda02fbc66aa850d1bbd71a0f3413da9177e64e92aa0446da37ae
    • MD5 SHA1 SHA512 SSDEEP
    • Quasar RAT

      Quasar is an open source Remote Access Tool.

    • Quasar payload

    • Executes dropped EXE

    • Target
      Artic-Tools-main/setup.bat
    • Size 62B
    • SHA256 59f5244b33fe77d4dfe76e5159d44a07e037040f8790276ec84139ed3128a21b
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      Artic-Tools-main/start.bat
    • Size 22B
    • SHA256 93f20b2d08664ce038d6c18475c6a82f6304da012aa910ffc82aca3657fd0a76
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      Artic-Tools-main/util/__init__.py
    • Size 702B
    • SHA256 7e6f34bc5a3d996efbf6e105ebc3d437af888a389c6b6034128b566ebaeb12a3
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/__pycache__/__init__.cpython-312.pyc
    • Size 860B
    • SHA256 71849c4665ffa6a1628a3f994135f45c4afbd7bd6e2095ad2ededb06c9926d72
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/bypass_rules.cpython-312.pyc
    • Size 1KB
    • SHA256 f9162a2ca9e7bf6ff34e6657177127dfeda958188b116504296fa88721e3e709
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/channel_spammer.cpython-312.pyc
    • Size 8KB
    • SHA256 a1eeda0c19365d04e32ddce22ff2d86bcc57c9acc52528175ea7a816c21575ab
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/hypesquad_changer.cpython-312.pyc
    • Size 1KB
    • SHA256 b134432056a708428cd5e98e868e658e44759427a9ba75278e4980b33edb4749
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/mass_report.cpython-312.pyc
    • Size 1KB
    • SHA256 3a39df846a2ed6cdff202e889bfeb685686997885c843eba2fd3a39ed9f9bcc2
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/soundboard_spammer.cpython-312.pyc
    • Size 2KB
    • SHA256 642c66db0e5a4ec73a18205ff1cb8e68312f38d92a97d7e2b1a431268ff7f4b0
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/token_bio_changer.cpython-312.pyc
    • Size 1KB
    • SHA256 bdbfa99bee183f9f810bfe7b7cb7fb447038b0355b544d4b354b87ec9004a8d2
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/token_checker.cpython-312.pyc
    • Size 4KB
    • SHA256 352651ded65925803ee86a0f8afd5a82220d80748311e85580d2a3d7e843be45
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/token_global_nicker.cpython-312.pyc
    • Size 1KB
    • SHA256 37d2548f19ae210a0a3b1abc3bc93f6a24ef31af4fe64d808ad5ad79e1591818
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/token_joiner.cpython-312.pyc
    • Size 1KB
    • SHA256 3bc8de4f0299903765638374b4d3f4f67de6bf54733c63b52edd07c0a16b0b75
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/token_leaver.cpython-312.pyc
    • Size 1KB
    • SHA256 0cb379e921dc02c746ccdce0b1b4ad87f240133b04e87b938e1057e39fdfc34f
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/token_pron_changer.cpython-312.pyc
    • Size 2KB
    • SHA256 5a224fb2fddda3b3867293b744977c69a9e80e4210cc391a7aeff1c736a31703
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/token_saver.cpython-312.pyc
    • Size 6KB
    • SHA256 88f4e14ad104a0208e5dddd9c07b2981adc399edc04670b6e3b158a489a47902
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/token_server_nicker.cpython-312.pyc
    • Size 1KB
    • SHA256 2a7c6c99161d334d725b45e49085fc1fe5eb6b3b4069b30f6db7efa40d2fd946
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/token_typer.cpython-312.pyc
    • Size 1KB
    • SHA256 54dd787b28ad15855687424e74fac70611d2a63ffba613e25f75fbf870b41ff8
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/__pycache__/webhook_tool.cpython-312.pyc
    • Size 3KB
    • SHA256 d21a8c44680901000a626db08056df93420a28c0167bc207de341c5a0ca832b1
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/bypass_rules.py
    • Size 797B
    • SHA256 6d3d030fd620ef28d68f85e565cbf30ddeaeed7da619edf229861ee5991e99d0
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/channel_spammer.py
    • Size 4KB
    • SHA256 e3917f95e8201ab5b01a693aae98fc7aebdfa7c2fc151c467763105ec8930788
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/hypesquad_changer.py
    • Size 848B
    • SHA256 4d4caa5188df4dd6969e0daba7641ecf51adf79285cf42766284a0ade37ad384
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/mass_report.py
    • Size 1KB
    • SHA256 879e4942541b288b5f6e5479a3badb8d2c7def127c1bbc8609ccbb7418ad222d
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/soundboard_spammer.py
    • Size 1KB
    • SHA256 a6cc0b409a54ac21d0662b156c029694b4fdbced30db2307ba83443502ae2f0d
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/token_bio_changer.py
    • Size 652B
    • SHA256 2f5255735b30f655dbf7ec70c19654aad86ea9d7c96f922f0431e0ccc4c49da6
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/token_checker.py
    • Size 2KB
    • SHA256 143b3e2b9a3239cf2e4ec9a1bbfaf8fb4ae6e9d6eab4d06d640410882a114b30
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/token_global_nicker.py
    • Size 668B
    • SHA256 d972e6a17370e2bd5f9d86a016994b5a1c5b06089cb2725d1c7a4c20e0a133d2
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/token_joiner.py
    • Size 914B
    • SHA256 c955e1399150c26775c0fa5715bfe8359128217acda1e4c64198387af9ac7d18
    • MD5 SHA1 SHA512
    Score
    3/10
    • Target
      Artic-Tools-main/util/options/token_leaver.py
    • Size 708B
    • SHA256 14af02b6cafe82c28152c6514d7e5fc6684630575d99539a4a8b14e407bd62e6
    • MD5 SHA1 SHA512
    Score
    3/10

MITRE ATT&CK Enterprise v15

Tasks

static1

office04quasar
Score
10/10

behavioral1

Score
3/10

behavioral2

Score
3/10

behavioral3

quasaroffice04spywaretrojan
Score
10/10

behavioral4

Score
1/10

behavioral5

Score
1/10

behavioral6

Score
3/10

behavioral7

Score
3/10

behavioral8

Score
3/10

behavioral9

Score
3/10

behavioral10

Score
3/10

behavioral11

Score
3/10

behavioral12

Score
3/10

behavioral13

Score
3/10

behavioral14

Score
3/10

behavioral15

Score
3/10

behavioral16

Score
3/10

behavioral17

Score
3/10

behavioral18

Score
3/10

behavioral19

Score
3/10

behavioral20

Score
3/10

behavioral21

Score
3/10

behavioral22

Score
3/10

behavioral23

Score
3/10

behavioral24

Score
3/10

behavioral25

Score
3/10

behavioral26

Score
3/10

behavioral27

Score
3/10

behavioral28

Score
3/10

behavioral29

Score
3/10

behavioral30

Score
3/10

behavioral31

Score
3/10

behavioral32

Score
3/10