General

  • Target
    Venom Cracked 2.7.0.0 - Cracked.rar
  • Size 33.4MB
  • Sample240801-kwmgvasenn
  • SHA256 3aaadd1e3b3cccf400661d70f2d5e2995e828a6f32f801b6fdc6411fb5b3769c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • quasar

Attributes
  • reconnect_delay

    5000

Targets

    • Target
      Venom Cracked 2.7.0.0 - Cracked.rar
    • Size 33.4MB
    • SHA256 3aaadd1e3b3cccf400661d70f2d5e2995e828a6f32f801b6fdc6411fb5b3769c
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/Telegram Channel.url
    • Size 123B
    • SHA256 6a032d543645fee6dfc238a6afc1a944457cb9a7399ad235995df485d1be1b29
    • MD5 SHA1 SHA512
    Score
    1/10
    • Target
      Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/VenomRemote Crack.exe
    • Size 31.1MB
    • SHA256 3dda8b24aff9312794b3d8da9884b6f7da2a4066a17a295eb738b9f98a877765
    • MD5 SHA1 SHA512 SSDEEP
    Score
    3/10
    • Target
      Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/Venombin.exe
    • Size 2.6MB
    • SHA256 a9da04a7a49309e177655fb41589cac45813b8a98e469225f58ed137a6fe3078
    • MD5 SHA1 SHA512 SSDEEP
    • Quasar RAT

      Quasar is an open source Remote Access Tool.

    • Quasar payload

    • Legitimate hosting services abused for malware hosting/C2

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Target
      Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/client.bin
    • Size 904KB
    • SHA256 82f35cefdffb27759bf8665c9b997401c5df88e631531a4fd2cfee456f84246e
    • MD5 SHA1 SHA512 SSDEEP
    • Target
      Venom Cracked 2.7.0.0 - Cracked/Venom Cracked 2.7.0.0/vncviewer.exe
    • Size 3.1MB
    • SHA256 e05e6fe9e454c132a68db6a76a4413250cbdb98b2b9a956353c90f60ac6fa422
    • MD5 SHA1 SHA512 SSDEEP
    Score
    1/10

MITRE ATT&CK Enterprise v15

Tasks