Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

QuasarRAT ...r.a.7z

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    QuasarRAT Builder.a.7z

  • Size

    421KB

  • MD5

    cc577d94f3e2b0acb110e15c1d516db9

  • SHA1

    027ac99b0507ee8396707e648d9e692f76ca78c3

  • SHA256

    85bbed1bc7d7b0288aff904291efeb19b3d694f8a1641be03751bb92ab80fc82

  • SHA512

    f694d6df5b5c21aa8c51133d2f6dcdd92544ed5ed1a9a2e381577ecf1055ebb767712e4524c2902cb5bb80a108462492a481fd964e04ad2846e2a9122db6d64e

  • SSDEEP

    12288:lPIcOoikkWX/68BV6Yb16gp5F8AD+OMhzKNfK:icOtkd5B1bDFND0O8

Score
10/10
quasar

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    5000

Signatures

  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • Unsigned PE 5 IoCs

    Checks for missing Authenticode signature.

Files

  • QuasarRAT Builder.a.7z
    .7z

    Password: infected

  • BuilderQuasarRAT.a/LICENSE
  • BuilderQuasarRAT.a/Mono.Cecil.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • BuilderQuasarRAT.a/Mono.Nat.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • BuilderQuasarRAT.a/Quasar.exe
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections

  • BuilderQuasarRAT.a/Vestris.ResourceLib.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Headers

    Imports

    Sections

  • BuilderQuasarRAT.a/client.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections