General

  • Target

    ixeeno.exe

  • Size

    1.5MB

  • Sample

    250327-ccx58swsgv

  • MD5

    2433a7e38a0a4cf473fd26fb8429aae0

  • SHA1

    a25454de6895dfdebdc86e8e799b3578f733d28d

  • SHA256

    0175d8a12d65b359733a5442daf4ca4b3160212eae7eed1679f9ae4a6b21ff0f

  • SHA512

    df7d60d46fb612617a667049e8e20caca3896af9516ba05ecf5c482e0ca1e2d92df4fcabce9f5cf1b04b277c17dc3e10c53c96cbde9e4ced600ceca7c0b0dbc3

  • SSDEEP

    24576:qlRNJAhU6S2HIPbcNE0KKzaOwIRxl2SVciNkgSMgm5Q+r3qVt:WDKEwKKzwipVcCPZyO4

Malware Config

Targets

    • Target

      ixeeno.exe

    • Size

      1.5MB

    • MD5

      2433a7e38a0a4cf473fd26fb8429aae0

    • SHA1

      a25454de6895dfdebdc86e8e799b3578f733d28d

    • SHA256

      0175d8a12d65b359733a5442daf4ca4b3160212eae7eed1679f9ae4a6b21ff0f

    • SHA512

      df7d60d46fb612617a667049e8e20caca3896af9516ba05ecf5c482e0ca1e2d92df4fcabce9f5cf1b04b277c17dc3e10c53c96cbde9e4ced600ceca7c0b0dbc3

    • SSDEEP

      24576:qlRNJAhU6S2HIPbcNE0KKzaOwIRxl2SVciNkgSMgm5Q+r3qVt:WDKEwKKzwipVcCPZyO4

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

    • Quasar family

    • Quasar payload

    • Drops file in Drivers directory

    • Executes dropped EXE

    • Loads dropped DLL

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks