QuasarRAT.v1,xRAT | 1928b93e3d7d

Classifications

Backdoor Spyware Keylogger

Threat Names

QuasarRAT xRAT Mal/Generic-S QuasarRAT.v1

Dynamic Analysis Report

Created on 2024-05-20T23:07:37+00:00

Sghgftd.exe

Windows Exe (x86-32)

Remarks (1/1)

Auto Reboot Triggered (0x02000004): The operating system was rebooted during the analysis because the sample installed a startup script, task or application for persistence.

General

6.68 KB total sent, 516.14 KB total received

4 ports: 80, 443, 53, 5965

6 contacted IP addresses

4 URLs extracted

0 files downloaded

2 malicious hosts detected

DNS

567 Bytes sent, 1.55 KB received

9 queries for 4 domains

1 name server contacted

0 queries returned errors

HTTP/S

0 Bytes sent, 0 Bytes received

0 URLs, 0 contacted servers

6 sessions detected

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting \"security.fileuri.strict_origin_policy\".

Before

After

WHOIS Domain Information

Screenshot

Domain Name
WHOIS Response