quasar | 720eea739bd033b804b98c0190b06d864dd61053aab14cb19d1c56d390686313 | Triage

Submit
Reports

Overview

overview

Static

static

720eea739b...13.exe

windows7-x64

720eea739b...13.exe

windows10-2004-x64

Sharing

General

Target

720eea739bd033b804b98c0190b06d864dd61053aab14cb19d1c56d390686313.exe
Size

267KB
Sample

241231-fwed1syrht
MD5

9ea49e8b67bf4eb173682c84c4a4f472
SHA1

7e328600053285468f4dd7c302cdc00d3a75ae89
SHA256

720eea739bd033b804b98c0190b06d864dd61053aab14cb19d1c56d390686313
SHA512

298dd6e8be7d4c8d8f917ab7194cf9449f4b7f2b3d839ea9843ab83c147d869737a6ba13b4da68620739ce7b2d12bfd7f5acb04c7711434e645e1b3699f05765
SSDEEP

6144:4aaXMzUmOZoqPp01j0JxZmYbjAHm/6AGA3+rsPpP:TachqhZPmDGSAGA3+gPZ

Score

10^/10

quasar discovery spyware trojan

Static task

static1

3 signatures

Behavioral task

behavioral1

Sample

720eea739bd033b804b98c0190b06d864dd61053aab14cb19d1c56d390686313.exe

Resource

win7-20241010-en

quasar discovery spyware trojan

windows7-x64

7 signatures

150 seconds

Behavioral task

behavioral2

Sample

720eea739bd033b804b98c0190b06d864dd61053aab14cb19d1c56d390686313.exe

Resource

win10v2004-20241007-en

quasar discovery spyware trojan

windows10-2004-x64

7 signatures

150 seconds

Malware Config

Targets

- Target
  
  720eea739bd033b804b98c0190b06d864dd61053aab14cb19d1c56d390686313.exe
- Size
  
  267KB
- MD5
  
  9ea49e8b67bf4eb173682c84c4a4f472
- SHA1
  
  7e328600053285468f4dd7c302cdc00d3a75ae89
- SHA256
  
  720eea739bd033b804b98c0190b06d864dd61053aab14cb19d1c56d390686313
- SHA512
  
  298dd6e8be7d4c8d8f917ab7194cf9449f4b7f2b3d839ea9843ab83c147d869737a6ba13b4da68620739ce7b2d12bfd7f5acb04c7711434e645e1b3699f05765
- SSDEEP
  
  6144:4aaXMzUmOZoqPp01j0JxZmYbjAHm/6AGA3+rsPpP:TachqhZPmDGSAGA3+gPZ
Score

10^/10

quasar discovery spyware trojan
- Quasar RAT
  Quasar is an open source Remote Access Tool.
  trojan spyware quasar
- Quasar family
  quasar
- Quasar payload
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

quasardiscoveryspywaretrojan

behavioral2

quasardiscoveryspywaretrojan

© 2018-2025

Terms | Privacy