General

  • Target

    Quasar

  • Size

    295KB

  • Sample

    250326-yfrcratm18

  • MD5

    372aa78807cdbd6be3357c112850a0fc

  • SHA1

    783d4706017383fdc6f8a6245357c16ecf95cfc1

  • SHA256

    32ce02fa1c029625139d9d3a5468de74f8e84029d60bd38c60a2d5b9c729fd7c

  • SHA512

    84999427d0f1b92d8ce47b060d439c680c7eaee3d154225436de509b838584b2602343e00c6d0f9690676c8b7c76966156b1aa1092bfce15c5313d08488f7e15

  • SSDEEP

    6144:XiNGNpOL/saqkPV97HILqgIDSsqIe9lvZJT3CqbMrhryf65NRPaCieMjAkvCJv1o:yNGNpOL/saqkPV97HILqgIDSsqIe9lv9

Malware Config

Targets

    • Target

      Quasar

    • Size

      295KB

    • MD5

      372aa78807cdbd6be3357c112850a0fc

    • SHA1

      783d4706017383fdc6f8a6245357c16ecf95cfc1

    • SHA256

      32ce02fa1c029625139d9d3a5468de74f8e84029d60bd38c60a2d5b9c729fd7c

    • SHA512

      84999427d0f1b92d8ce47b060d439c680c7eaee3d154225436de509b838584b2602343e00c6d0f9690676c8b7c76966156b1aa1092bfce15c5313d08488f7e15

    • SSDEEP

      6144:XiNGNpOL/saqkPV97HILqgIDSsqIe9lvZJT3CqbMrhryf65NRPaCieMjAkvCJv1o:yNGNpOL/saqkPV97HILqgIDSsqIe9lv9

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

    • Quasar family

    • Quasar payload

    • Legitimate hosting services abused for malware hosting/C2

MITRE ATT&CK Enterprise v15

Tasks