Overview

overview

10

Static

static

10

Client-built66.exe

windows7-x64

10

Client-built66.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client-built66.exe

  • Size

    1.5MB

  • Sample

    250327-xd5xpaylx9

  • MD5

    67d95d3eb21ca6d4e309d3e0c7b65595

  • SHA1

    f60d16348059a74b03d368ef3df41a15c2c6cc01

  • SHA256

    718833d88ff6500a6dde11a5b3b1809a61c591823ae214a59d99450abfb006ce

  • SHA512

    004e8fa6499b640be4d6f69ebeb752d6dcaeececc4832a920fe6d2dec3988eee52350cb69b90a6d9fc458a38bb12fa96ff7457a6dbded25266545c3c2428706f

  • SSDEEP

    24576:ffMnwA1Qg+S2HIPbcNE0KKzaOwIRxl2SLuLLusXbQ4q045nLjuodgD:HYrMEwKKzwipyX8WGLj9g

Score
10/10
quasarspywaretrojan

Malware Config

Targets

    • Target

      Client-built66.exe

    • Size

      1.5MB

    • MD5

      67d95d3eb21ca6d4e309d3e0c7b65595

    • SHA1

      f60d16348059a74b03d368ef3df41a15c2c6cc01

    • SHA256

      718833d88ff6500a6dde11a5b3b1809a61c591823ae214a59d99450abfb006ce

    • SHA512

      004e8fa6499b640be4d6f69ebeb752d6dcaeececc4832a920fe6d2dec3988eee52350cb69b90a6d9fc458a38bb12fa96ff7457a6dbded25266545c3c2428706f

    • SSDEEP

      24576:ffMnwA1Qg+S2HIPbcNE0KKzaOwIRxl2SLuLLusXbQ4q045nLjuodgD:HYrMEwKKzwipyX8WGLj9g

    Score
    10/10
    quasarspywaretrojan

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • Quasar family

      quasar

    • Quasar payload

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks