General

  • Target
    sex.exe
  • Size 643KB
  • Sample260921-bxzdcsfc36
  • SHA256 d194843a09fd3557ae324337ef5100bafc1effb3b834dea8a85ee749603ee48a
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • quasar

Attributes
  • encryption_key

    95A8DD3B0B062542EEE9A222291A6E1F52D0D1B1

  • key_salt

    5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382

  • reconnect_delay

    3000

Targets

    • Target
      sex.exe
    • Size 643KB
    • SHA256 d194843a09fd3557ae324337ef5100bafc1effb3b834dea8a85ee749603ee48a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Quasar RAT

      Quasar is an open source Remote Access Tool.

    • PulsaRAT library module

      Core component of the PulsaRAT remote access trojan, implementing its command protocol for hidden remote desktop, UAC bypass, persistence, and credential theft.

    • Quasar payload

MITRE ATT&CK Matrix

Tasks