Analysis
-
max time kernel
117s -
max time network
117s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
-
submitted
09-01-2025 15:06
General
-
Target
Client-built.exe
-
Size
369KB
-
MD5
905b52f7e66b196e5723282d566e7238
-
SHA1
60b0dc7e45122b897582d8a127b9f51152fe2137
-
SHA256
c3114016473515ac92ab688e1d81ef32cd7dc1104f8ce0b23a10de5804335778
-
SHA512
89c4c30ecb2412e2443bf496697f82e0eeb1d78bcf9946e1bd6a96999372adf878a9e36374a1c8347ae1d55f6b27c1f93b1ddaf22d5c3cf9e6d35b9478bd5ff9
-
SSDEEP
6144:veiHHHjGvfAkOCSQzRMhfZDFXqJYQH2Cavvj6F8l3bXlzcpALdxl9Y9FG:veSnjGnAkOCSQzRMhfZ5qGz6F8dlzcQ9
Score
10/10
Malware Config
Signatures
-
Quasar RAT
Quasar is an open source Remote Access Tool.
-
Quasar family
-
Quasar payload 1 IoCs
-
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
Processes
-
C:\Users\Admin\AppData\Local\Temp\Client-built.exe"C:\Users\Admin\AppData\Local\Temp\Client-built.exe"1⤵
- System Location Discovery: System Language Discovery
Network
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
-
Filesize
392KB