Overview

overview

10

Static

static

10

ryrez_beta (2).exe

windows10-2004-x64

10

ryrez_beta (2).exe

windows10-ltsc 2021-x64

10

ryrez_beta (2).exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    ryrez_beta (2).exe

  • Size

    246KB

  • Sample

    241208-v6kq4szqhs

  • MD5

    8531555e8a8669f067c286a61882852b

  • SHA1

    6c9a2fa7a1bbf31d7d1dd2e52c791e3e9abbab16

  • SHA256

    4c3e3beb897dcb9a41bf4a4a051267b880b4b0f2a8691816775c2ff18d1c5bc5

  • SHA512

    e1cbd4b7e3395fd7651fe25b23722b9831a19a04266bb8f81d385390b7c8f393bb219f3f981b33aa093313acd12e3c9f5673c155809c9a7696c2cc44be651155

  • SSDEEP

    6144:CHJ+W6sz4rlKJOdpcw1R4JoLwYJuRsbWVh6cns8J:nxKJOdpvqYJuJVh6cns8J

Score
10/10
quasardiscoveryspywaretrojan

Malware Config

Targets

    • Target

      ryrez_beta (2).exe

    • Size

      246KB

    • MD5

      8531555e8a8669f067c286a61882852b

    • SHA1

      6c9a2fa7a1bbf31d7d1dd2e52c791e3e9abbab16

    • SHA256

      4c3e3beb897dcb9a41bf4a4a051267b880b4b0f2a8691816775c2ff18d1c5bc5

    • SHA512

      e1cbd4b7e3395fd7651fe25b23722b9831a19a04266bb8f81d385390b7c8f393bb219f3f981b33aa093313acd12e3c9f5673c155809c9a7696c2cc44be651155

    • SSDEEP

      6144:CHJ+W6sz4rlKJOdpcw1R4JoLwYJuRsbWVh6cns8J:nxKJOdpvqYJuJVh6cns8J

    Score
    10/10
    quasardiscoveryspywaretrojan

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • Quasar family

      quasar

    • Quasar payload

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1behavioral2behavioral3

MITRE ATT&CK Enterprise v15

Tasks