2a2318931bd734571cef8c28a1d3e2f81592e4fc0d4f3db35484efad7dea17c5 | Triage™

Login
Reports

Overview

overview

7

Static

static

3

Quasar.zip

windows10-2004-x64

1

Quasar.zip

windows11-ltsc_2024-x64

1

Quasar/Qua...ar.exe

windows10-2004-x64

7

Quasar/Qua...ar.exe

windows11-ltsc_2024-x64

7

quasar.pyc

windows10-2004-x64

3

quasar.pyc

windows11-ltsc_2024-x64

3

Quasar/Qua...DME.md

windows10-2004-x64

3

Quasar/Qua...DME.md

windows11-ltsc_2024-x64

3

Quasar/Qua...ts.bat

windows10-2004-x64

3

Quasar/Qua...ts.bat

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

Target
Quasar.zip
Size 30.7MB
Sample260817-afnpvszdpc
SHA256 2a2318931bd734571cef8c28a1d3e2f81592e4fc0d4f3db35484efad7dea17c5
MD5 e86d968a459a22bf2b847edffedff529
SHA1 43e112d371f3416b17c0e08248b4c7dab9d62f3b
SHA512 8b0102d271cf17c808e9f9253b8cecbc3c10da20974f06f00db2b05fd473c779c3757781aa3592a6d871f20866ee11ee8bad059d4cbac1b406238016e8c1fce2
SSDEEP 786432:oYGbHPNjCrfNSM7ZMC6a3SatUtBORKc7v4PLEF7CaJ8Zq:oTPcrfNS8MZwzUDORKMv2Y7B8Zq
TLSH
T1386733455B412D66E40CFA464FA3A2D5A2D892353F72ACFCBB5502E53BF71C4C34A23A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

execution pyinstaller

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

Quasar.zip

Resource

win10v2004-20260513-en

windows10-2004-x64

0 signatures

900 seconds

Behavioral task

behavioral2

Sample

Quasar.zip

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

0 signatures

900 seconds

Behavioral task

behavioral3

Sample

Quasar/Quasar/Quasar.exe

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral4

Sample

Quasar/Quasar/Quasar.exe

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

900 seconds

Behavioral task

behavioral5

Sample

quasar.pyc

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral6

Sample

quasar.pyc

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

900 seconds

Behavioral task

behavioral7

Sample

Quasar/Quasar/README.md

Resource

win10v2004-20260513-en

windows10-2004-x64

4 signatures

900 seconds

Behavioral task

behavioral8

Sample

Quasar/Quasar/README.md

Resource

win11ltsc2024-20260709-en

windows11-ltsc_2024-x64

4 signatures

900 seconds

Behavioral task

behavioral9

Sample

Quasar/Quasar/requirements.bat

Resource

win10v2004-20260513-en

windows10-2004-x64

1 signatures

900 seconds

Behavioral task

behavioral10

Sample

Quasar/Quasar/requirements.bat

Resource

win11ltsc2024-20260710-en

windows11-ltsc_2024-x64

1 signatures

900 seconds

Malware Config

Targets

- Target
  Quasar.zip
- Size 30.7MB
- SHA256 2a2318931bd734571cef8c28a1d3e2f81592e4fc0d4f3db35484efad7dea17c5
- MD5 e86d968a459a22bf2b847edffedff529
- SHA1 43e112d371f3416b17c0e08248b4c7dab9d62f3b
- SHA512 8b0102d271cf17c808e9f9253b8cecbc3c10da20974f06f00db2b05fd473c779c3757781aa3592a6d871f20866ee11ee8bad059d4cbac1b406238016e8c1fce2
- SSDEEP 786432:oYGbHPNjCrfNSM7ZMC6a3SatUtBORKc7v4PLEF7CaJ8Zq:oTPcrfNS8MZwzUDORKMv2Y7B8Zq
- TLSH
  T1386733455B412D66E40CFA464FA3A2D5A2D892353F72ACFCBB5502E53BF71C4C34A23A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Quasar/Quasar/Quasar.exe
- Size 31.1MB
- SHA256 11fc1889453aeeb7b7253a605d73402c9c82c0c9e18132813a247bf9289a925e
- MD5 2b53821b56587c76e04476f2752d99d8
- SHA1 c1905ebcaf96d84fe12c7c4c2f1eb6bf9d35816f
- SHA512 870034691c63e66eb446929c105bbb380d3d213c4584e1c9c5d279d30c466b4075163cf264f020f1a7555f4909910d3447a4060412abbe76d518fa8e60db551e
- SSDEEP 786432:X2G4TLcNOiVbrwKvuToWAGWFtZq5TXwcx7++6/Yk0:cTIAiVbrb0oZVDq5zwKl2Y
- TLSH
  T1AD6733596AD02457EDC6D57DCAB3D26AF2A7A5303F60C9CF168943B02E73B80447A336
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

execution
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral3 behavioral4
- Target
  quasar.pyc
- Size 25KB
- SHA256 8bf77ba765ffaf8f574536009203cfd811aa0ca35491d94f3d7957d7526c5b62
- MD5 dca4d65de03a6c55eec9a06f8dd87359
- SHA1 353a7db354e45a0099a3fc71f2b376cacee8ba05
- SHA512 464f05f4e3496cce2ea0a50a634b777b8d06fbeb73f74f7a5f88ac2b9707b4b105a6d4dafe320b3546cf342ba585248026f7c9f37853c20dacbaf7453db158a2
- SSDEEP 384:PAMjiWZj8n03zcJogdla1HqMa8OkfaKlf/dPgMEerZ:xJmndo4AKUOkfaKlfdEerZ
- TLSH
  T150C2F678A410A823FDE8F53830CBE7987732C301B105D79BD6286CBD7DD930A5592A2E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral5 behavioral6
- Target
  Quasar/Quasar/README.md
- Size 1KB
- SHA256 f704bb9f6c719817554fbc13f1cc7009c07f8ca5a554528621e494b708627337
- MD5 05ac264c20d415bb356fa25340c177ac
- SHA1 23bad62f36d918e9e41aa44cfc6b4cfd1329e7c3
- SHA512 fa102343477757323463fd9adf3241c6e85f343da0bdb9b52193a6120bc3538959de59af615d81f2ce12c5ad084c7dfa50c2aea148ebfff91259576d2e884fb1
- TLSH
  T1614165A218529EA503750CD255B02C4EF181E5DEC7614A09F4AD00FFBFB80B1CE8B996
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral7 behavioral8
- Target
  Quasar/Quasar/requirements.bat
- Size 1KB
- SHA256 6798796747826807d05e5ea3e9b9e905dc880245000d08152994eca866987a7a
- MD5 9300b51e08ac2fd2e3246754fd4511e3
- SHA1 affa9a6fa015a0b5787cab203b18b688e630e2be
- SHA512 ec8f4fee211b24d53c39635df414956f76428f6f7e67aa7853944a403b869f687a582828297dabf4de956e133e67a0d076919be44e1bb868e64f6abaeef4220f
- TLSH
  T1AE21322A316561B572B06F899CBA0C23F545A4E3D1462C18B0BF40F80F345C2FEAAF5B
- MD5 SHA1 SHA512 TLSH
Score

3^/10

execution
behavioral10 behavioral9

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

© 2018-2026

Terms | Privacy