Overview

overview

10

Static

static

10

Client-built.exe

windows10-2004-x64

10

Client-built.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    Client-built.exe

  • Size

    1.5MB

  • Sample

    250420-jmz6xaxyew

  • MD5

    efdf48328fd93af977682db2ac7b56ce

  • SHA1

    006abc06af3cdc20dd52588beb5ce4f13273f2db

  • SHA256

    dd1ff957df241c8301de5be805cbe9c484a9d3768e657afffc83a0697f881674

  • SHA512

    30f723977dd6006954f6fc19c23abf421c11a00845ba9dbbd9a465ce6c7a023f96bc641023a1833605cc0306d1e4a7371cee7e2f31bb755d02c25f548949f8d3

  • SSDEEP

    24576:uU1R7bTS2eWBRwRR16zhHIPbcNK0KKm77yviUSQaZaOwI55l2S62r9exnXWiA1Qx:uqRR7wR2EgKKm77LrwCB6T+1Q

Score
10/10
quasarspywaretrojan

Malware Config

Extracted

Family

quasar

Attributes
  • encryption_key

    1FB7485171FF20CDA99F01C1B832D8813FC1E606

  • reconnect_delay

    3000

  • startup_key

    �&)M-Im�� c�hp����C��.��

Targets

    • Target

      Client-built.exe

    • Size

      1.5MB

    • MD5

      efdf48328fd93af977682db2ac7b56ce

    • SHA1

      006abc06af3cdc20dd52588beb5ce4f13273f2db

    • SHA256

      dd1ff957df241c8301de5be805cbe9c484a9d3768e657afffc83a0697f881674

    • SHA512

      30f723977dd6006954f6fc19c23abf421c11a00845ba9dbbd9a465ce6c7a023f96bc641023a1833605cc0306d1e4a7371cee7e2f31bb755d02c25f548949f8d3

    • SSDEEP

      24576:uU1R7bTS2eWBRwRR16zhHIPbcNK0KKm77yviUSQaZaOwI55l2S62r9exnXWiA1Qx:uqRR7wR2EgKKm77LrwCB6T+1Q

    Score
    10/10
    quasarspywaretrojan

    • Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • Quasar family

      quasar

    • Quasar payload

    • Executes dropped EXE

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks