General
- Target Instagram.jpeg
- Size 79KB
- Sample260831-hrv73sem81
- SHA256 a401d89df5d0ff532ab143585e70ed1cbaf5f6e3ba8a2b43ecb57b71858a4d6b
Score
10/10
Malware Config
Targets
-
- Target Instagram.jpeg
- Size 79KB
- SHA256 a401d89df5d0ff532ab143585e70ed1cbaf5f6e3ba8a2b43ecb57b71858a4d6b
Score10/10-
Family: Quasar RAT
Quasar is an open source Remote Access Tool.
-
Quasar payload
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Command and Scripting Interpreter: PowerShell
Powershell Invoke Web Request.
-
Command and Scripting Interpreter: PowerShell
Using powershell.exe command.
-
Downloads MZ/PE file
-
Registers new Windows logon scripts automatically executed at logon.
-
Suspicious clipboard content.
A suspicious script was copied to clipboard.
-
Probable phishing domain