General
- Target Quasar.exe
- Size 27KB
- Sample260629-vnnp2sat7s
- SHA256 3d3f247fd9faf63f05c0fa3539247ac84e54bdf13891538641d4be8090542490
Score
8/10
Malware Config
Targets
-
- Target Quasar.exe
- Size 27KB
- SHA256 3d3f247fd9faf63f05c0fa3539247ac84e54bdf13891538641d4be8090542490
Score8/10-
Modifies Windows Firewall
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Persistence
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1Privilege Escalation
Create or Modify System Process
1Windows Service
1Event Triggered Execution
1Netsh Helper DLL
1