QuasarRAT:
Curated IOCs

QuasarRAT's Key IOCs & Sandbox Analysis

Sample Hash STIX JSON IOC Download IOCs
cde05dec6ff12dc06d24c32cf60525de84f11985fa82cbd734ccc63e1c3e9d9d
View the Sandbox Web Report
https://www.vmray.com/analyses/_vt/cde05dec6ff1/report/stix-report-2-1.json hxxp[://]172[.]105[.]
101[.]254:7812
payloads-poison[.]
000webhostapp[.]com
cde05dec6ff12dc06d24c32cf60525de84f11985fa82cbd734ccc63e1c3e9d9d
View the Sandbox Web Report
https://www.vmray.com/analyses/_vt/d0c4045c70a0/report/stix-report-2-1.json hxxps[://]github[.]com
/ImagineBeingRatted/
Sigma/raw/main
/Install[.]exe
hxxp[://]runderscore00-25501[.]portmap
[.]host:25501
193[.]161[.]193[.]99
8f4c47976f851049b82a25404b72c892147d9aa7d3b62024c686ad24c763f029
View the Sandbox Web Report
https://www.vmray.com/analyses/_vt/8f4c47976f85/report/stix-report-2-1.json hxxp[://]0x21[.]in:8000
/_az/
hxxp[://]0x21[.]in/_az/
hxxp[://]5[.]8[.]88[.]191:443
hxxp[://]sockartek[.]icu:443
5[.]8[.]88[.]191
601768671271d499533a4360f1272fdb5a86ce4c87649811b80fc463422dff41
View the Sandbox Web Report
https://www.vmray.com/analyses/_vt/601768671271/report/stix-report-2-1.json hxxp[://]93[.]182[.]171[.]
7:4782
5f32994ba6ed6ae9e0e77f719c38578d62fa20e17e6120a2adede2671dc7c5cc
View the Sandbox Web Report
https://www.vmray.com/analyses/_vt/5f32994ba6ed/report/stix-report-2-1.json hxxp[://]abdo2024-47006[.]portmap
[.]host:8080
45649f750756140bd9d47794c91c11e6d6b28424c8b497c3d5bf0a59bb9ba527
View the Sandbox Web Report
https://www.vmray.com/analyses/_vt/45649f750756/report/stix-report-2-1.json hxxp[://]maeluadev-48337[.]
portmap[.]io:48337
193[.]161[.]193[.]99
e4b15f8ce5b80e4f7d805ecfd73311eb133b5c138d074e806a48b81584292f65
View the Sandbox Web Report
https://www.vmray.com/analyses/_vt/e4b15f8ce5b8/report/stix-report-2-1.json hxxp[://]edition-eat[.]gl
[.]at[.]ply[.]gg:13576
0d4276cbdb9eb4f3cf2524032e9f80bca3d1762404ad2240d35a2c123fe2e71d
View the Sandbox Web Report
https://www.vmray.com/analyses/_vt/0d4276cbdb9e/report/stix-report-2-1.json hxxp[://]windows-11[.]duckdns[.]org:11
1928b93e3d7d30a0e8c2f6ef17b6333f79a3ee628ede60c41b1885f74e7f3303
View the Sandbox Web Report
https://www.vmray.com/analyses/_vt/1928b93e3d7d/report/stix-report-2-1.json hxxp[://]pvt4s[.]duckdns[.]org:5965
6da2005775980d44d0a6f9d8f12d7394e8d81abf96f444a6c4da54c2376430a0
View the Sandbox Web Report
https://www.vmray.com/analyses/_vt/6da200577598/report/stix-report-2-1.json hxxps[://]github[.]com
/ImagineBeingRatted/Sigma
/raw/main/Install[.]exe
hxxp[://]panel-slave[.]gl[.]at[.]ply[.]gg:57059
d2f90d475a108951b3411445011c23803016cb0e537dde32d8d879a896906efb
View the Sandbox Web Report
https://www.vmray.com/analyses/_vt/d2f90d475a10/report/stix-report-2-1.json hxxp[://]141[.]98[.]7[.]186:65525
hxxp[://]141[.]98[.]7[.]196:61516
hxxp[://]141[.]98[.]7[.]201:64872
hxxp[://]141[.]98[.]7[.]175:64872
hxxp[://]141[.]98[.]7[.]197:61516
hxxp[://]141[.]98[.]7[.]188:61516
hxxp[://]141[.]98[.]7[.]198:65525
hxxp[://]141[.]98[.]7[.]176:64872
hxxp[://]141[.]98[.]7[.]199:65525
35e7fe834913b280077c5a30396138bfdcb3dae404b7802878be38b3d2120606
View the Sandbox Web Report
https://www.vmray.com/analyses/_vt/35e7fe834913/report/stix-report-2-1.json hxxp[://]19[.]ip[.]gl[.]ply[.]gg:53356

Subscribe to our IOC Newsletter for the latest intelligence on QuasarRAT

Days
Hours
Minutes
Seconds

Ready to stress-test your malware sandbox? Join us for a no-fluff, all-demo webinar that shows you real techniques to evaluate and optimize your sandboxing solution!