Overview

overview

10

Static

static

3

pt3FUor71KhFxRI.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    pt3FUor71KhFxRI.exe

  • Size

    1.6MB

  • Sample

    250328-e86tcstn12

  • MD5

    07cabbbc11af08a2c4540c0fa2cff498

  • SHA1

    78694904ffd774102ed8a7956971009aeb014356

  • SHA256

    0be5a8e4d80353ec3e852df8da35a05138978ea6fb7b8cb10f244f709e170be0

  • SHA512

    cc0df894db716b74f7d33e375cb66c0fbafb31f4bcc4cef937aea0038681acfb086f8c9660d9603d6ce5506bb615f01ddfb869cbc3ac5c1f444b042cc6c513d9

  • SSDEEP

    49152:rq4H/Y6gY9W3M4xtJXYDjf9Gjyl4h2iKw:24HwAW3JxDUQ+l4giKw

Score
10/10
quasardiscoveryspywaretrojan

Malware Config

Targets

    • Target

      pt3FUor71KhFxRI.exe

    • Size

      1.6MB

    • MD5

      07cabbbc11af08a2c4540c0fa2cff498

    • SHA1

      78694904ffd774102ed8a7956971009aeb014356

    • SHA256

      0be5a8e4d80353ec3e852df8da35a05138978ea6fb7b8cb10f244f709e170be0

    • SHA512

      cc0df894db716b74f7d33e375cb66c0fbafb31f4bcc4cef937aea0038681acfb086f8c9660d9603d6ce5506bb615f01ddfb869cbc3ac5c1f444b042cc6c513d9

    • SSDEEP

      49152:rq4H/Y6gY9W3M4xtJXYDjf9Gjyl4h2iKw:24HwAW3JxDUQ+l4giKw

    Score
    10/10
    quasardiscoveryspywaretrojan

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • Quasar family

      quasar

    • Quasar payload

    • Executes dropped EXE

    • Drops file in System32 directory

    • Suspicious use of SetThreadContext

    behavioral1

MITRE ATT&CK Enterprise v15

Tasks