Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

RAT tool.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    RAT tool.exe

  • Size

    3.1MB

  • MD5

    c588a1b864cd68bc3a872397a272c3dc

  • SHA1

    43a960182c02bd5da1667039f80ccad60d58e897

  • SHA256

    cc0f58ce042b7fdfbdd6708e02b81291ede8efd84c0f6ddb15cc112cc5a7931d

  • SHA512

    f76a5d94b7e6368a438f629afec8ed0eefb54712c9bb5234743b94cea34e4ca1947b6b90df30b9d082ca5feabbc6498af364bb5ff8d0e008da7f6a9f207c1e60

  • SSDEEP

    49152:yvQt62XlaSFNWPjljiFa2RoUYITunIJwQToGdOTHHB72eh2NT:yvc62XlaSFNWPjljiFXRoUYITunIJwQ

Score
10/10
office04quasar

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Office04

C2

192.168.1.30:4782

Mutex

527d6b5a-c716-4500-9e84-5840c7e340a4

Attributes
  • encryption_key

    E54BE336D58046FD53BA6384AD78D66E8B2B987A

  • install_name

    Client.exe

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Discord

  • subdirectory

    SubDir

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • RAT tool.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.