MALWARE FAMILY

Quasar RAT

Internal ID: win.quasar_rat

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Quasar RAT is a malware family written in .NET which is used by a variety of attackers. The malware is fully functional and open source, and is often packed to make analysis of the source more difficult.

Threat Analysis

Quasar RAT is a malware family tracked by threat intelligence researchers and catalogued in the Malpedia dataset. It represents a distinct malicious software lineage with identifiable code characteristics, behaviors, and victimology.

External References

→http://researchcenter.paloaltonetworks.com/2017/01/unit42-downeks-and-quasar-rat-used-in-recent-targeted-attacks-against-governments

→http://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/bluebottle-banks-targeted-africa

→https://0x00sec.org/t/master-of-rats-how-to-create-your-own-tracker/20848

→https://adeo.com.tr/wp-content/uploads/2020/02/APT10_Report.pdf

→https://asec.ahnlab.com/en/31089/

→https://blog.ensilo.com/uncovering-new-activity-by-apt10

→https://blog.malwarelab.pl/posts/venom/

→https://blog.minerva-labs.com/trapping-quasar-rat

→https://blog.morphisec.com/cinarat-resurfaces-with-new-evasive-tactics-and-techniques

→https://blog.morphisec.com/syk-crypter-discord

Quick Facts

TypeMalware Family

Aliases1

Also Known As

win.quasar_rat

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search Quasar RAT