MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 c8c3bc6c01dee147be04e3fbaeb5ff72fbee21e676ba04b7326738e692cec9d0. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry


Intelligence 1 File information 1 Yara 1 Comments

SHA256 hash: c8c3bc6c01dee147be04e3fbaeb5ff72fbee21e676ba04b7326738e692cec9d0
SHA3-384 hash: f02e83c72f79225034fea92ab573a4fb1bc247565f7dc3e7424ac5b7877a046bca4fe0a13e8e61d7e4005e42bf04cf31
SHA1 hash: a7597474eeb9506030d36dbd7fc8d015a50cac8b
MD5 hash: 372e453ee2f834493417fe5aea1ba23e
humanhash: ohio-don-pasta-solar
File name:c8c3bc6c01dee147be04e3fbaeb5ff72fbee21e676ba04b7326738e692cec9d0
Download: download sample
Signature QuasarRAT
File size:1'697'280 bytes
First seen:2020-06-30 06:55:17 UTC
Last seen:Never
File type:Executable exe
MIME type:application/x-dosexec
imphash f34d5f2d4577ed6d9ceec516c1f5a744
ssdeep 49152:36xIzSD9/xrpv0OE0C3vuwJNzV4W2b4h6:7SD9/xrN0nbU7b4h6
TLSH 91752349325D3D3BCD7D02F98482924517B8B1652A13F3F60EE244E98BDABEE0653673
Reporter @JAMESWT_MHT
Tags:QuasarRAT

Intelligence


Mail intelligence No data
# of uploads 1
# of downloads 29
Origin country IT IT
CAPE Sandbox Detection:n/a
Link: https://www.capesandbox.com/analysis/16844/
ClamAV SecuriteInfo.com.MSIL.Kryptik.VFR-1.UNOFFICIAL
CERT.PL MWDB Detection:n/a
Link: https://mwdb.cert.pl/sample/c8c3bc6c01dee147be04e3fbaeb5ff72fbee21e676ba04b7326738e692cec9d0/
ReversingLabs :Status:Malicious
Threat name:ByteCode-MSIL.Trojan.Kryptik
First seen:2020-06-30 00:58:26 UTC
AV detection:25 of 31 (80.65%)
Threat level:   5/5
Spamhaus Hash Blocklist :Malicious file
Hatching Triage Score:   1/10
Malware Family:n/a
Link: https://tria.ge/reports/200630-m27r2exlqn/
Tags:n/a
VirusTotal:Virustotal results 20.83%

Yara Signatures


Rule name:Quasar_RAT_1
Author:Florian Roth
Description:Detects Quasar RAT
Reference:https://www.pwc.co.uk/cyber-security/pdf/cloud-hopper-annex-b-final.pdf

File information


The table below shows additional information about this malware sample such as delivery method and external references.

Comments