Resubmissions

22/08/2026, 04:21

260822-eymmqsvxe1

22/08/2026, 04:16

260822-evsdtaeq3w10

General

  • Target
    Client-built.exe
  • Size 2.6MB
  • Sample260822-evsdtaeq3w
  • SHA256 8abbbd5b09c97b43027817523dbe5cd7450a767150922ed50732d740e5c94560
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • quasar

Version
  • 1.6.6

Botnet
  • RATS

C2
  • luije-40835.portmap.host:40835

Mutex
  • e7635f8e-07f7-4cbb-9645-cc50408defab

Attributes
  • encryption_key

    7799F230382DEC15CFC54F1D560B5A8B875621D2

  • install_name

    .exe

  • key_salt

    5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382

  • reconnect_delay

    3000

Targets

    • Target
      Client-built.exe
    • Size 2.6MB
    • SHA256 8abbbd5b09c97b43027817523dbe5cd7450a767150922ed50732d740e5c94560
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Quasar RAT

      Quasar is an open source Remote Access Tool.

    • Quasar payload

MITRE ATT&CK Matrix

Tasks