QuasarRAT Analysis

This repository publishes analysis reports and analysis tools for Quasar and the Quasar family.

Tools

Python tools for analyzing Quasar. These tools support Quasar version 1.3. We have future works to support version 1.4.

quasarrat_client.py

Python script that fake a Quasar client.

quasarrat_decode.py

Python script to decode and encode Quasar packet.

quasarrat_panel.py

Python script that fake a Quasar C2 panel.

Research results

Slides

• Botconf 2020
  • https://github.com/JPCERTCC/QuasarRAT-Analysis/blob/master/slides/Botconf2020-Hunting_the_Quasar_Family.pdf

Blog

TBA

Quasar family