Overview

overview

10

Static

static

1

Pulsar-ModifiedV2.zip

windows11-21h2-x64

10

Resubmissions

02/10/2026, 22:01

261002-1w649atfpd10

25/05/2026, 00:49

260525-a6qxxadt9x7

Sharing

Copy URL Twitter E-mail

General

  • Target
    Pulsar-ModifiedV2.zip
  • Size 14.2MB
  • Sample261002-1w649atfpd
  • SHA256 b2d6d2cb6500e769a0d050e0737b21bd34e56c86941ee1b719d66bfd7d929a34
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
quasaroffice04adwarediscoverymoduleratspywaretrojan

Malware Config

Extracted

Family

  • quasar

Attributes
  • key_salt

    5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382

  • reconnect_delay

    5000

Extracted

Family

  • quasar

Version

  • 1.6.6

Botnet

  • Office04

C2

  • 127.0.0.1:4782

Mutex

  • e10968fc-64ca-4bb8-99ad-879c94cb8393

Attributes
  • encryption_key

    D63146C9E99C2B9ABEEF78C2F49527EE71488A20

  • install_name

    Client.exe

  • key_salt

    5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382

  • log_directory

    Logs

  • reconnect_delay

    3000

  • startup_key

    Pulsar Client Startup

  • subdirectory

    SubDir

Targets

    • Target
      Pulsar-ModifiedV2.zip
    • Size 14.2MB
    • SHA256 b2d6d2cb6500e769a0d050e0737b21bd34e56c86941ee1b719d66bfd7d929a34
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    adwareoffice04discoveryquasarmoduleratspywaretrojan

    • Family: Quasar RAT

      Quasar is an open source Remote Access Tool.

      trojanspywarequasar

    • PulsaRAT library module

      Core component of the PulsaRAT remote access trojan, implementing its command protocol for hidden remote desktop, UAC bypass, persistence, and credential theft.

      ratmodule

    • Quasar payload

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks