Overview 35 indicators
No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.
| domain | 35 | QUASAR-domain.txt |
Principal sources 2 reports
Ranked by how many of this actor's indicators each report brought in.
- 34researchcenter.paloaltonetworks.com/2017/01/unit42-downeks-and-quasar-rat-u…
- 2symantec.com/security_response/writeup.jsp?docid=201…
Related groups 1
What the sources have in common — not a claim that these are the same actor. See the whole graph.
Timeline 35 indicators
Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.
No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.
-
researchcenter.paloaltonetworks.com/2017/01/unit42-downeks-and-quasar-rat-u…
bandtester.com datasamsung.com down.downloadoneyoutube.co.vu downloadlog.linkpc.net downloadmyhost.zapto.org downloadtesting.com dynamicipaddress.linkpc.net exportball.servegame.org ftpserverit.otzo.com galaxy-s.com galaxysupdates.com gameoolines.com gamestoplay.bid havan.qhigh.com help2014.linkpc.net helpyoume.linkpc.net hostgatero.ddns.net kolabdown.sytes.net netstreamag.publicvm.com newphoneapp.com noredirecto.redirectme.net onlinesoft.space rotter2.publicvm.com safara.sytes.net smartsftp.pw speedbind.com subsidiaryohio.linkpc.net topgamse.com ukgames.tech viewnet.better-than.tv wallanews.publicvm.com wallanews.sytes.net webfile.myq-see.com -
symantec.com/security_response/writeup.jsp?docid=201… · researchcenter.paloaltonetworks.com/2017/01/unit42-downeks-and-quasar-rat-u…
progsupdate.com -
symantec.com/security_response/writeup.jsp?docid=201…
microsoftnewupdate.com