quasar | 6c7fd107dce2880c6841677b15f95c1fd2a3ccac9f5be007107075f606f54b34 | Triage™

Login
Reports

Overview

overview

Static

static

Loader.exe

windows7-x64

Loader.exe

windows10-1703-x64

Loader.exe

windows10-2004-x64

Loader.exe

windows11-21h2-x64

Loader.exe

android-10-x64

Loader.exe

android-11-x64

Loader.exe

android-13-x64

Loader.exe

android-9-x86

Loader.exe

macos-10.15-amd64

4

Loader.exe

debian-12-armhf

Loader.exe

debian-12-mipsel

Loader.exe

debian-9-armhf

Loader.exe

debian-9-mips

Loader.exe

debian-9-mipsel

Loader.exe

ubuntu-18.04-amd64

Loader.exe

ubuntu-20.04-amd64

Loader.exe

ubuntu-22.04-amd64

Loader.exe

ubuntu-24.04-amd64

Sharing

Copy URL Twitter E-mail

General

Target
Loader.exe
Size 3.1MB
Sample240805-mte14axfpc
SHA256 6c7fd107dce2880c6841677b15f95c1fd2a3ccac9f5be007107075f606f54b34
MD5 71fce84b3e3af2af448930f5e6c57dfe
SHA1 d504cf7d4f37454fc11ab56f304def9a24119c81
SHA512 b9751cccd92393262c58a91e13fa062b0c38a666cffb19bdfe1f95630041479872851841d7423a977853af3f643cee25331fa10c95c71835aac6b36b09fcf2a5
SSDEEP 49152:5HobtR1o2PmNXo7WCr5nO9DvKvrYdgTHHB72eh2NT:5HmRvmNXo7WCr5O9Di
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

quasar irisloader android evasion linux macos spyware trojan

Static task

static1

3 signatures

irisloader quasar

Behavioral task

behavioral1

Sample

Loader.exe

Resource

win7-20240704-en

windows7-x64

6 signatures

150 seconds

quasar irisloader spyware trojan

Behavioral task

behavioral2

Sample

Loader.exe

Resource

win10-20240404-en

windows10-1703-x64

6 signatures

150 seconds

quasar irisloader spyware trojan

Behavioral task

behavioral3

Sample

Loader.exe

Resource

win10v2004-20240802-en

windows10-2004-x64

6 signatures

150 seconds

quasar irisloader spyware trojan

Behavioral task

behavioral4

Sample

Loader.exe

Resource

win11-20240802-en

windows11-21h2-x64

6 signatures

150 seconds

quasar irisloader spyware trojan

Behavioral task

behavioral5

Sample

Loader.exe

Resource

android-x64-20240624-en

android-10-x64

0 signatures

150 seconds

Behavioral task

behavioral6

Sample

Loader.exe

Resource

android-x64-arm64-20240624-en

android-11-x64

0 signatures

150 seconds

Behavioral task

behavioral7

Sample

Loader.exe

Resource

android-33-x64-arm64-20240624-en

android-13-x64

0 signatures

150 seconds

Behavioral task

behavioral8

Sample

Loader.exe

Resource

android-x86-arm-20240624-en

android-9-x86

0 signatures

150 seconds

Behavioral task

behavioral9

Sample

Loader.exe

Resource

macos-20240711.1-en

macos-10.15-amd64

1 signatures

150 seconds

Behavioral task

behavioral10

Sample

Loader.exe

Resource

debian12-armhf-20240418-en

debian-12-armhf

0 signatures

150 seconds

Behavioral task

behavioral11

Sample

Loader.exe

Resource

debian12-mipsel-20240221-en

debian-12-mipsel

0 signatures

150 seconds

Behavioral task

behavioral12

Sample

Loader.exe

Resource

debian9-armhf-20240729-en

debian-9-armhf

0 signatures

150 seconds

Behavioral task

behavioral13

Sample

Loader.exe

Resource

debian9-mipsbe-20240611-en

debian-9-mips

0 signatures

150 seconds

Behavioral task

behavioral14

Sample

Loader.exe

Resource

debian9-mipsel-20240418-en

debian-9-mipsel

0 signatures

150 seconds

Behavioral task

behavioral15

Sample

Loader.exe

Resource

ubuntu1804-amd64-20240729-en

ubuntu-18.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral16

Sample

Loader.exe

Resource

ubuntu2004-amd64-20240611-en

ubuntu-20.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral17

Sample

Loader.exe

Resource

ubuntu2204-amd64-20240611-en

ubuntu-22.04-amd64

0 signatures

150 seconds

Behavioral task

behavioral18

Sample

Loader.exe

Resource

ubuntu2404-amd64-20240523-en

ubuntu-24.04-amd64

0 signatures

150 seconds

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

IrisLoader

C2

147.185.221.18:42996
147.185.221.18:1770

Mutex

9ddbf7fe-160a-423f-af8b-9cc2c3be4fa1

Attributes

encryption_key
9E968F05BD874BA1BE086FD1774A027473823F49
install_name
Client.exe
log_directory
Logs
reconnect_delay
3000
startup_key
Quasar Client Startup
subdirectory
SubDir

Targets

- Target
  Loader.exe
- Size 3.1MB
- SHA256 6c7fd107dce2880c6841677b15f95c1fd2a3ccac9f5be007107075f606f54b34
- MD5 71fce84b3e3af2af448930f5e6c57dfe
- SHA1 d504cf7d4f37454fc11ab56f304def9a24119c81
- SHA512 b9751cccd92393262c58a91e13fa062b0c38a666cffb19bdfe1f95630041479872851841d7423a977853af3f643cee25331fa10c95c71835aac6b36b09fcf2a5
- SSDEEP 49152:5HobtR1o2PmNXo7WCr5nO9DvKvrYdgTHHB72eh2NT:5HmRvmNXo7WCr5O9Di
- MD5 SHA1 SHA512 SSDEEP
Score

10^/10

quasar irisloader spyware trojan evasion
- Quasar RAT
  Quasar is an open source Remote Access Tool.
  trojan spyware quasar
- Quasar payload
behavioral1 behavioral10 behavioral11 behavioral12 behavioral13 behavioral14 behavioral15 behavioral16 behavioral17 behavioral18 behavioral2 behavioral3 behavioral4 behavioral5 behavioral6 behavioral7 behavioral8 behavioral9

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

Resource Forking

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

irisloaderquasar

behavioral1

quasaririsloaderspywaretrojan

behavioral2

quasaririsloaderspywaretrojan

behavioral3

quasaririsloaderspywaretrojan

behavioral4

quasaririsloaderspywaretrojan

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

© 2018-2026

Terms | Privacy