quasar | 64dcf17b277e401e3bd456a9aaaf331c5c6b6d42e3bf4a651aa3025b8bd6bd56 | Triage

Submit
Reports

Overview

overview

Static

static

3

JaffaCakes...49.exe

windows7-x64

JaffaCakes...49.exe

windows10-2004-x64

Sharing

General

Target

JaffaCakes118_16cd0bbded2718e507779e46e1376449
Size

2.8MB
Sample

250106-jg48nszqhw
MD5

16cd0bbded2718e507779e46e1376449
SHA1

7334c9cbdb63bd602f1873935893328528551e9a
SHA256

64dcf17b277e401e3bd456a9aaaf331c5c6b6d42e3bf4a651aa3025b8bd6bd56
SHA512

22ceca0a2f5bafb99f622480bb2fc13de40ca596ee9f7187f799d21656de63d2f9422671f960811871f78b1c7364048a99455961f46f93199c095630c5165077
SSDEEP

49152:+QjttU7vLrb/TuvO90dL3BmAFd4A64nsfJMLZgTR55IUquz173Ej5/ZIIVBv:+QPuGOPDUj5hVN

Score

10^/10

quasar discovery spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

JaffaCakes118_16cd0bbded2718e507779e46e1376449.exe

Resource

win7-20240903-en

quasar discovery spyware trojan

windows7-x64

8 signatures

150 seconds

Behavioral task

behavioral2

Sample

JaffaCakes118_16cd0bbded2718e507779e46e1376449.exe

Resource

win10v2004-20241007-en

quasar discovery spyware trojan

windows10-2004-x64

8 signatures

150 seconds

Malware Config

Targets

- Target
  
  JaffaCakes118_16cd0bbded2718e507779e46e1376449
- Size
  
  2.8MB
- MD5
  
  16cd0bbded2718e507779e46e1376449
- SHA1
  
  7334c9cbdb63bd602f1873935893328528551e9a
- SHA256
  
  64dcf17b277e401e3bd456a9aaaf331c5c6b6d42e3bf4a651aa3025b8bd6bd56
- SHA512
  
  22ceca0a2f5bafb99f622480bb2fc13de40ca596ee9f7187f799d21656de63d2f9422671f960811871f78b1c7364048a99455961f46f93199c095630c5165077
- SSDEEP
  
  49152:+QjttU7vLrb/TuvO90dL3BmAFd4A64nsfJMLZgTR55IUquz173Ej5/ZIIVBv:+QPuGOPDUj5hVN
Score

10^/10

quasar discovery spyware trojan
- Quasar RAT
  Quasar is an open source Remote Access Tool.
  trojan spyware quasar
- Quasar family
  quasar
- Quasar payload
- Executes dropped EXE
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

quasardiscoveryspywaretrojan

behavioral2

quasardiscoveryspywaretrojan

© 2018-2025

Terms | Privacy