General

  • Target

    Client-built.exe

  • Size

    1.6MB

  • Sample

    250328-eqg3aatmw4

  • MD5

    fb20750c6897828894a8898ec4981247

  • SHA1

    6c69199fea80c61a33c661424c5b32f5616f98a8

  • SHA256

    5057c9d2aef506507ce6446a1880bf4412d66509dfc8ddf2a10aaaf3d24b71c8

  • SHA512

    9167a40048dd341a4c1f78849ab974f1ffd4bd95e840fcb9dd30d5d0bd1d92384c2cd5a213cc845f579d2273b9ecd78f06ba78a7ba8b6920b583061fad0b5cf5

  • SSDEEP

    24576:HJodbAroAS2HIPbcNE0KKzaOwIRxl2Sk43mw5CLZzc4tMx1:pOyEwKKzwipTIZc4U

Score
10/10

Malware Config

Targets

    • Target

      Client-built.exe

    • Size

      1.6MB

    • MD5

      fb20750c6897828894a8898ec4981247

    • SHA1

      6c69199fea80c61a33c661424c5b32f5616f98a8

    • SHA256

      5057c9d2aef506507ce6446a1880bf4412d66509dfc8ddf2a10aaaf3d24b71c8

    • SHA512

      9167a40048dd341a4c1f78849ab974f1ffd4bd95e840fcb9dd30d5d0bd1d92384c2cd5a213cc845f579d2273b9ecd78f06ba78a7ba8b6920b583061fad0b5cf5

    • SSDEEP

      24576:HJodbAroAS2HIPbcNE0KKzaOwIRxl2Sk43mw5CLZzc4tMx1:pOyEwKKzwipTIZc4U

    Score
    10/10
    • Quasar RAT

      Quasar is an open source Remote Access Tool.

    • Quasar family

    • Quasar payload

    • Executes dropped EXE

    • Drops file in System32 directory

MITRE ATT&CK Enterprise v15

Tasks