General

  • Target
    Nat2Client.exe
  • Size 5.3MB
  • Sample261018-we1tpafv7l
  • SHA256 85ef91c48cefd9dd54044815bb24604adc8530c8efb3d328576be074fa549ee5
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Extracted

Family
  • quasar

Botnet
  • �X���Sr

Attributes
  • encryption_key

    AD3C71CCA7ABB4B3A0A93151B7732A06AA4E92F6

  • key_salt

    5a23f8394640cb9e40658446a04c0bbae82dc93d0470e1b2a406a90fd2520382

  • reconnect_delay

    3000

Targets

    • Target
      Nat2Client.exe
    • Size 5.3MB
    • SHA256 85ef91c48cefd9dd54044815bb24604adc8530c8efb3d328576be074fa549ee5
    • MD5 SHA1 SHA512 SSDEEP TLSH
    • Family: Quasar RAT

      Quasar is an open source Remote Access Tool.

    • Quasar payload

MITRE ATT&CK Enterprise v16

Tasks