quasar | a0cc4ddbe4be862466938b1867e0c1cd321678965843604f6410bf7510adf729 | Triage™

Login
Reports

Overview

overview

Static

static

3

QuasarRAT-master.zip

windows11-ltsc_2024-x64

Sharing

Copy URL Twitter E-mail

General

Target
QuasarRAT-master.zip
Size 1.3MB
Sample261112-gv683set4j
SHA256 a0cc4ddbe4be862466938b1867e0c1cd321678965843604f6410bf7510adf729
MD5 f50e7be3a32bee0f06d1ef8f10e5c1c7
SHA1 424a1794ae6d09874c531a5f5d0a1b574e3963a7
SHA512 c195a47bf3b94a00ca32ce4cc978f1d59f5961d1b51345ddffb17a9b6c609bede44aaab102b6382138c7ccd324d798cfe9df27f813f554c1b3f88a7533c71ce7
SSDEEP 24576:1gCYVSykQ/1q5GPr3Fo4tBHNvC3F04ZCTB3FqkDh3FcX3FSFgp4UjQh9ylobbhA5:1TYVhTVocRNvCV04ZCBVqkdVGV8gp4U/
TLSH
T15C55D0ACD2801DA1D8C633FD54C39523EF72854551DE2E02AAB6703AC4E7B1B27E1B6D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

quasar discovery execution spyware trojan

Static task

static1

1 signatures

Behavioral task

behavioral1

Sample

QuasarRAT-master.zip

Resource

win11ltsc2024-20260911-es

windows11-ltsc_2024-x64

18 signatures

300 seconds

discovery execution quasar spyware trojan

Malware Config

Targets

- Target
  QuasarRAT-master.zip
- Size 1.3MB
- SHA256 a0cc4ddbe4be862466938b1867e0c1cd321678965843604f6410bf7510adf729
- MD5 f50e7be3a32bee0f06d1ef8f10e5c1c7
- SHA1 424a1794ae6d09874c531a5f5d0a1b574e3963a7
- SHA512 c195a47bf3b94a00ca32ce4cc978f1d59f5961d1b51345ddffb17a9b6c609bede44aaab102b6382138c7ccd324d798cfe9df27f813f554c1b3f88a7533c71ce7
- SSDEEP 24576:1gCYVSykQ/1q5GPr3Fo4tBHNvC3F04ZCTB3FqkDh3FcX3FSFgp4UjQh9ylobbhA5:1TYVhTVocRNvCV04ZCBVqkdVGV8gp4U/
- TLSH
  T15C55D0ACD2801DA1D8C633FD54C39523EF72854551DE2E02AAB6703AC4E7B1B27E1B6D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

discovery execution quasar spyware trojan
- Family: Quasar RAT
  Quasar is an open source Remote Access Tool.
  trojan spyware quasar
- Quasar payload
- Executes dropped EXE
- Loads dropped DLL
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

Windows Command Shell

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

System Network Configuration Discovery

Internet Connection Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoveryexecutionquasarspywaretrojan

© 2018-2026

Terms | Privacy