2026-09-27_761eb7540553f63a9f6bba56726d0ab1_conti_quasar-rat

Sharing

Copy URL Twitter E-mail

General

Target
2026-09-27_761eb7540553f63a9f6bba56726d0ab1_conti_quasar-rat
Size 228KB
Sample260928-e26vsawtht
SHA256 a31b5f813939b60d32f7334f2c3a89030ee2340159a981077d964cfdedd8c28b
MD5 761eb7540553f63a9f6bba56726d0ab1
SHA1 70de6fb18903dbfe458a2328be7859868fedb639
SHA512 146dcc64abff01ca120539cda71c5379f4500b50e3f8e2c07b9e59ab0e36bfd395d72588aa731cdd33db76541f45901aaf7637dc9b4890b2654d896e1a61ac3f
SSDEEP 3072:h/em2SfTcI2r8M1S8UxF3MUY6+WSvmf680UlF:lYSfhM1S8+F3xSXUP
TLSH
T1C9346D16EB5314FDD1ABD178C5975EB2E632B8090361AFEF2748E2321F21D904E3E612
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2026-09-27_761eb7540553f63a9f6bba56726d0ab1_conti_quasar-rat

File Explorer

2026-09-27_761eb7540553f63a9f6bba56726d0ab1_conti_quasar-rat

.exe 228KB

2026-09-27_761eb7540553f63a9f6bba56726d0ab1_conti_quasar-rat

IMPHASH b11e4fb28292db2e55fc518f0b6c8642
SHA256 a31b5f813939b60d32f7334f2c3a89030ee2340159a981077d964cfdedd8c28b
MD5 761eb7540553f63a9f6bba56726d0ab1
SHA1 70de6fb18903dbfe458a2328be7859868fedb639
SHA512 146dcc64abff01ca120539cda71c5379f4500b50e3f8e2c07b9e59ab0e36bfd395d72588aa731cdd33db76541f45901aaf7637dc9b4890b2654d896e1a61ac3f
SSDEEP 3072:h/em2SfTcI2r8M1S8UxF3MUY6+WSvmf680UlF:lYSfhM1S8+F3xSXUP
TLSH
T1C9346D16EB5314FDD1ABD178C5975EB2E632B8090361AFEF2748E2321F21D904E3E612
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

180224

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

libiconv-2

libiconv libiconv_close libiconv_open libiconvlist

kernel32

DeleteCriticalSection EnterCriticalSection GetACP GetLastError InitializeCriticalSection IsDBCSLeadByteEx LeaveCriticalSection MultiByteToWideChar SetUnhandledExceptionFilter Sleep TlsGetValue VirtualProtect VirtualQuery WideCharToMultiByte

msvcrt

__C_specific_handler ___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _close _commode _errno _fmode _initterm _lock _open _stat64 _unlock _write abort atexit atoi calloc exit fclose feof ferror fopen fprintf fputc fputs fread free fseek ftell fwrite getc localeconv malloc memcpy memmove memset putc puts realloc setlocale signal strcmp strerror strlen strncmp strncpy strstr vfprintf wcslen

libpcre2-posix-3

pcre2_regcomp pcre2_regerror pcre2_regexec pcre2_regfree

zlib1

crc32 inflate inflateEnd inflateInit2_

Name

.text

Size

38KB

Virtual Size

38KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

41KB

Virtual Size

91KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rcdf1b

Size

100KB

Virtual Size

100KB

Characteristics

IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

File Explorer

2026-09-27_761eb7540553f63a9f6bba56726d0ab1_conti_quasar-rat

libiconv-2

kernel32

msvcrt

libpcre2-posix-3

zlib1

generic