Overview

overview

10

Static

static

1

Onimai_1.7.1.rar

windows11-ltsc_2024-x64

10

PASSWORD.txt

windows11-ltsc_2024-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target
    Onimai_1.7.1.rar
  • Size 10.2MB
  • Sample260804-gsgweaxvbs
  • SHA256 1812dc467d6e39cf081bb07cc494c3c342238244cbbcc847480e085c6c82ed69
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
quasardefense_evasiondiscoveryexecutionransomwarespywaretrojan

Malware Config

Extracted

Family

  • quasar

Attributes
  • key_salt

    bfeb1e56fbcd973bb219022430a57843003d5644d21e62b9d4f180e7e6c33941

  • reconnect_delay

    5000

Targets

    • Target
      Onimai_1.7.1.rar
    • Size 10.2MB
    • SHA256 1812dc467d6e39cf081bb07cc494c3c342238244cbbcc847480e085c6c82ed69
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    defense_evasiondiscoveryexecutionquasarransomwarespywaretrojan

    • Family: Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • Quasar payload

    • Executes dropped EXE

    behavioral1
    • Target
      PASSWORD.txt
    • Size 12B
    • SHA256 90ec92e572defac5645f670a992b86b67ff742a3ac4647abbb1a0cc75c474e31
    • MD5 SHA1 SHA512
    Score
    1/10
    ransomware
    behavioral2

MITRE ATT&CK Enterprise v16

Tasks