Analysis
-
max time kernel
296s -
max time network
204s -
platform
windows11-21h2_x64 -
resource
win11-20241007-en -
resource tags
-
submitted
15-12-2024 16:40
General
-
Target
client.exe
-
Size
272KB
-
MD5
a921e37e23819ea074d76087d5ea376f
-
SHA1
31e00dfc39c54f904f53c24566ff0f45a346b7e7
-
SHA256
85d06f34198bea71b2144fc4c0d138d8e4b072312c840b2f62f74717feaeead7
-
SHA512
f414675832a25d3f7a0bd33519e9f8f3709ce06b8115fa7136032f6d827a884d7c0549f148e7e0d2e38e7b63cf92598c858694d99639fc5538de2cdc0c260afc
-
SSDEEP
6144:ZjzAAHQEEoYt/ynA1K7IUriFi3/a972zT:lcAwJ8AEEti3P
Score
10/10
Malware Config
Signatures
-
Quasar RAT
Quasar is an open source Remote Access Tool.
-
Quasar family
-
Suspicious use of AdjustPrivilegeToken 1 IoCs
-
Suspicious use of SetWindowsHookEx 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\client.exe"C:\Users\Admin\AppData\Local\Temp\client.exe"1⤵
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SetWindowsHookEx
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
4.8MB
-
Filesize
624KB
-
Filesize
9.6MB
-
Filesize
392KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
32KB
-
Filesize
4KB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB
-
Filesize
9.6MB