quasar | a06fb340d32ab66caf6d851719c4e51e77a3208b337a0bca99879cfaba35d2c7 | Triage

Sharing

General

Target

a06fb340d32ab66caf6d851719c4e51e77a3208b337a0bca99879cfaba35d2c7.exe
Size

8.6MB
Sample

241219-nmp36asmht
MD5

18614ee994ac149ba306d530651d627c
SHA1

fbb67a2e7723e9c08b9faba8a4e5b1104ffefaed
SHA256

a06fb340d32ab66caf6d851719c4e51e77a3208b337a0bca99879cfaba35d2c7
SHA512

013aa8b9e32b17980906f44dd8e77deb1f81ed6520972a20bf8639cfb42d825ee6a4000cdcfc31071c1bd9c3dbee51613f53e859e771d3428747bbd646105af9
SSDEEP

98304:sX6BNhy0K9ZrLuJipnDfuvmrdLqEWsEtzo9aBN6K+tFXLx04:cuhy0+xLuJipDmc5Pnakxq4

Score

10^/10

quasar bat is spyware trojan

Malware Config

Extracted

Family

quasar

Version

1.4.1

Botnet

Bat IS

C2

51.15.17.193:4782

Mutex

4cdc792e-d5cc-4480-93ab-ecbd2e6b9073

Attributes

encryption_key
97599F6E5D14A784CC4DD36B18A277119042FDA8
install_name
Client.exe
log_directory
Logs
reconnect_delay
3000
startup_key
Quasar Client Startup
subdirectory
SubDir

Targets

- Target
  
  a06fb340d32ab66caf6d851719c4e51e77a3208b337a0bca99879cfaba35d2c7.exe
- Size
  
  8.6MB
- MD5
  
  18614ee994ac149ba306d530651d627c
- SHA1
  
  fbb67a2e7723e9c08b9faba8a4e5b1104ffefaed
- SHA256
  
  a06fb340d32ab66caf6d851719c4e51e77a3208b337a0bca99879cfaba35d2c7
- SHA512
  
  013aa8b9e32b17980906f44dd8e77deb1f81ed6520972a20bf8639cfb42d825ee6a4000cdcfc31071c1bd9c3dbee51613f53e859e771d3428747bbd646105af9
- SSDEEP
  
  98304:sX6BNhy0K9ZrLuJipnDfuvmrdLqEWsEtzo9aBN6K+tFXLx04:cuhy0+xLuJipDmc5Pnakxq4
Score

10^/10

quasar bat is spyware trojan
- Quasar RAT
  Quasar is an open source Remote Access Tool.
  trojan spyware quasar
- Quasar family
  quasar
- Quasar payload
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

quasarbat isspywaretrojan

behavioral2

quasarbat isspywaretrojan