General
- Target 2026-08-16_db61dd88d8a9df6c5beec8e287f76aaa_quasar-rat
- Size 21.3MB
- Sample260816-pzfwpayakd
- SHA256 24235cd06ba795d45107f7f8081fd0c2a94bb6636745d2c6c586597c1157901c
- MD5 db61dd88d8a9df6c5beec8e287f76aaa
- SHA1 6c84694f38904f15003b2bc9cb5dcac5689c41e9
- SHA512 1f42b1d900cecb093432120fdeb560cfc40e7156c832e67c54d85fda07b4f099f88116640fa73b01e9ac32fa0b205beb3ed0c476d529282a063cbc7de3c2c22c
- SSDEEP 196608:LPFTIg8dafEr3eCJw7LKrMtmeeWh7gh70SOCbAle0eB6z/q0OaWHGCsygX:1INYcJ4IMYQSOCcqB6zOaWHGCk
- TLSH T159378E02B7D74CE6D9C12B74E89F136E7720FE206B2A2B7F554C95205D932DCAC1AB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
4 signatures
Behavioral task
behavioral1
Sample
2026-08-16_db61dd88d8a9df6c5beec8e287f76aaa_quasar-rat.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-16_db61dd88d8a9df6c5beec8e287f76aaa_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-08-16_db61dd88d8a9df6c5beec8e287f76aaa_quasar-rat
- Size 21.3MB
- SHA256 24235cd06ba795d45107f7f8081fd0c2a94bb6636745d2c6c586597c1157901c
- MD5 db61dd88d8a9df6c5beec8e287f76aaa
- SHA1 6c84694f38904f15003b2bc9cb5dcac5689c41e9
- SHA512 1f42b1d900cecb093432120fdeb560cfc40e7156c832e67c54d85fda07b4f099f88116640fa73b01e9ac32fa0b205beb3ed0c476d529282a063cbc7de3c2c22c
- SSDEEP 196608:LPFTIg8dafEr3eCJw7LKrMtmeeWh7gh70SOCbAle0eB6z/q0OaWHGCsygX:1INYcJ4IMYQSOCcqB6zOaWHGCk
- TLSH T159378E02B7D74CE6D9C12B74E89F136E7720FE206B2A2B7F554C95205D932DCAC1AB60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Maps connected drives based on registry
Disk information is often read in order to detect sandboxing environments.