S0262 - QuasarRAT

QuasarRAT is an open-source, remote access tool that has been publicly available on GitHub since at least 2014. QuasarRAT is developed in the C# language.

Author
agomez
Created
2023-06-14 00:28:48
Last updated
2026-02-07 18:56:22
Downloads
381931
IPv4 indicators
33
Hostname indicators
576
URL indicators
6
Sample indicators
482

Download this feed in plain text, STIX2 or MISP format with a free Maltiverse account, or sync it natively into your security stack (SIEM, firewall, EDR, TIP) with 27+ integrations.

Latest Indicators of Compromise in this feed

tcwine.us Hostname

modified 2026-10-18 06:30:58
Quasar RAT (ThreatFox Abuse.ch)

titine555.ddns.net Hostname

modified 2026-10-18 05:50:02
Quasar RAT (ThreatFox Abuse.ch)

supply-dressing.gl.at.ply.gg Hostname

modified 2026-10-18 05:44:07
Quasar RAT (ThreatFox Abuse.ch)

milogviolo.ddns.net Hostname

modified 2026-10-18 04:40:26
Quasar RAT (ThreatFox Abuse.ch)

leetlauncher64.duckdns.org Hostname

modified 2026-10-18 04:40:24
Quasar RAT (ThreatFox Abuse.ch)

vpngoogle.duckdns.org Hostname

modified 2026-10-18 04:40:07
Quasar RAT (ThreatFox Abuse.ch)

faggotry.ddns.net Hostname

modified 2026-10-18 04:40:05
Quasar RAT (ThreatFox Abuse.ch)

jomegi9539-58684.portmap.host Hostname

modified 2026-10-18 04:39:54
Quasar RAT (ThreatFox Abuse.ch)

yellow-parts.gl.at.ply.gg Hostname

modified 2026-10-18 04:39:54
Quasar RAT (ThreatFox Abuse.ch)

systcisd.ddnsking.com Hostname

modified 2026-10-18 04:39:53
Quasar RAT (ThreatFox Abuse.ch)

booktook.sa.com Hostname

modified 2026-10-18 04:39:50
Quasar RAT (ThreatFox Abuse.ch)

ship-be.gl.at.ply.gg Hostname

modified 2026-10-18 04:39:28
Quasar RAT (ThreatFox Abuse.ch)

1.tcp.eu.cpolar.io Hostname

modified 2026-10-18 04:39:15
Quasar RAT (ThreatFox Abuse.ch)

erogen.ru.com Hostname

modified 2026-10-18 04:39:15
Quasar RAT (ThreatFox Abuse.ch)

cryptersandtools.ddns.com.br Hostname

modified 2026-10-18 04:38:52
Quasar RAT (ThreatFox Abuse.ch)

etapi.ydzh.ltd Hostname

modified 2026-10-18 04:38:45
Quasar RAT (ThreatFox Abuse.ch)

oxy01.duckdns.org Hostname

modified 2026-10-18 04:38:37
Quasar RAT (ThreatFox Abuse.ch) · Asyncrat (Maltrail)

1ss.giize.com Hostname

modified 2026-10-18 04:38:09
Quasar RAT (ThreatFox Abuse.ch)

darwin22.ddns.net Hostname

modified 2026-10-18 04:38:08
Quasar RAT (ThreatFox Abuse.ch)

jul5050quasab.duckdns.org Hostname

modified 2026-10-18 04:38:02
Quasar RAT (ThreatFox Abuse.ch)

beautyandhealth.com.mx Hostname

modified 2026-10-18 04:37:57
Quasar RAT (ThreatFox Abuse.ch)

bilaielpilpiol-47684.portmap.host Hostname

modified 2026-10-18 04:37:54
Quasar RAT (ThreatFox Abuse.ch)

dafacodabac52.fit Hostname

modified 2026-10-18 04:37:53
Quasar RAT (ThreatFox Abuse.ch)

mb663rd.com Hostname

modified 2026-10-18 04:37:53
Quasar RAT (ThreatFox Abuse.ch)

780.cn.com Hostname

modified 2026-10-18 04:37:47
Quasar RAT (ThreatFox Abuse.ch) · Virvance phishing (Maltiverse)

suspicious-morning-30221.pktriot.net Hostname

modified 2026-10-18 04:37:38
Quasar RAT (ThreatFox Abuse.ch)

zjvhvg.za.com Hostname

modified 2026-10-18 04:37:35
Quasar RAT (ThreatFox Abuse.ch)

camesurvelizerditis.sytes.net Hostname

modified 2026-10-18 04:37:29
Quasar RAT (ThreatFox Abuse.ch)

bideo.duckdns.org Hostname

modified 2026-10-18 04:37:28
Quasar RAT (ThreatFox Abuse.ch) · Top Popularity Site (Cisco Umbrella)

possible-cables.gl.at.ply.gg Hostname

modified 2026-10-18 04:37:19
Quasar RAT (ThreatFox Abuse.ch)

shadowhost.ddns.net Hostname

modified 2026-10-18 04:37:12
Quasar RAT (ThreatFox Abuse.ch)

weeks-ranger.gl.at.ply.gg Hostname

modified 2026-10-18 04:37:07
Quasar RAT (ThreatFox Abuse.ch)

war-committee.at.ply.gg Hostname

modified 2026-10-18 04:36:59
Quasar RAT (ThreatFox Abuse.ch)

aa.repack4u.pro Hostname

modified 2026-10-18 04:36:55
Quasar RAT (ThreatFox Abuse.ch) · Generic Malware (Maltiverse Threat Observatory) · Malicious behavior (Maltiverse Threat Observatory)

pax.mentality.cloud Hostname

modified 2026-10-18 04:36:49
Quasar RAT (ThreatFox Abuse.ch)

sunwintaixiuonline.com Hostname

modified 2026-10-18 04:36:42
Quasar RAT (ThreatFox Abuse.ch)

indiagov.duckdns.org Hostname

modified 2026-10-18 04:36:29
Quasar RAT (ThreatFox Abuse.ch)

kvejo991.ddns.net Hostname

modified 2026-10-18 04:36:28
Quasar RAT (ThreatFox Abuse.ch) · Backdoor.DarkKomet (Hybrid-Analysis)

data.xoilactvqq.live Hostname

modified 2026-10-18 04:36:25
Quasar RAT (ThreatFox Abuse.ch)

coolboy123123431-41087.portmap.host Hostname

modified 2026-10-18 04:35:58
Quasar RAT (ThreatFox Abuse.ch)

girroflobsny.ydns.eu Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

kdewebdev.org Hostname

modified 2026-10-18 04:35:43
Quasar rat (Maltiverse Threat Observatory)

cryptersandtools.hopto.org Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

xcorpitx.ddns.net Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

vinmporflowgroun.ydns.eu Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

blackid-30073.portmap.host Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

katieqlhello.ru.com Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

yuka-kosaka.com Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

dart23.ddns.net Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

casino-within.at.ply.gg Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch) · Malicious URL (Hybrid-Analysis)

joshdhenigg4-39140.portmap.host Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

youcool12334213213-43544.portmap.host Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

lulu06-51302.portmap.io Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

j88bm.com Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

che.ydns.eu Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

mar-vietnamese.gl.at.ply.gg Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

aug-drain.gl.at.ply.gg Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

went-hello.gl.at.ply.gg Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

last-forces.gl.at.ply.gg Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

etcs.ydzh.ltd Hostname

modified 2026-10-18 04:35:43
Quasar RAT (ThreatFox Abuse.ch)

slotscatteremas.jp.net Hostname

modified 2026-10-18 04:35:42
Quasar RAT (ThreatFox Abuse.ch)

whosfart.zapto.org Hostname

modified 2026-10-18 04:35:42
Quasar RAT (ThreatFox Abuse.ch)

quasharr.ddns.net Hostname

modified 2026-10-18 04:35:42
Quasar RAT (ThreatFox Abuse.ch)

onlinegambling.mn Hostname

modified 2026-10-18 04:35:42
Quasar RAT (ThreatFox Abuse.ch)

imjustdoingmyjob.ddns.net Hostname

modified 2026-10-18 04:35:42
Quasar RAT (ThreatFox Abuse.ch)

esskaybeauty.in Hostname

modified 2026-10-18 04:35:42
Quasar RAT (ThreatFox Abuse.ch)

previous-page.mooo.com Hostname

modified 2026-10-18 04:35:42
Quasar RAT (ThreatFox Abuse.ch)

registry.ddns.net Hostname

modified 2026-10-18 04:35:42
Gen:Variant.Johnnie (Hybrid-Analysis) · Wacapew.C (Hybrid-Analysis) · Malware.Generic (Hybrid-Analysis) · Quasar RAT (ThreatFox Abuse.ch) · Asyncrat (Maltrail)

pbensoauptfouresdopsopsseead.ydns.eu Hostname

modified 2026-10-18 04:35:33
Quasar RAT (ThreatFox Abuse.ch)

far-marine.gl.at.ply.gg Hostname

modified 2026-10-18 04:35:15
Quasar RAT (ThreatFox Abuse.ch)

zykk5es6go3izsb.club Hostname

modified 2026-10-18 04:34:51
Quasar RAT (ThreatFox Abuse.ch)

constantinedev.ddns.info Hostname

modified 2026-10-18 04:34:47
Quasar RAT (ThreatFox Abuse.ch)

88clb8.io Hostname

modified 2026-10-18 04:34:42
Quasar RAT (ThreatFox Abuse.ch)

quantri.colatv88xb.cc Hostname

modified 2026-10-18 04:34:31
Quasar RAT (ThreatFox Abuse.ch)

choose-inserted.gl.at.ply.gg Hostname

modified 2026-10-18 04:34:31
Quasar RAT (ThreatFox Abuse.ch)

bandarslotterpercaya.jp.net Hostname

modified 2026-10-18 04:34:23
Quasar RAT (ThreatFox Abuse.ch)

mainplangndngrotobinpulseving.ydns.eu Hostname

modified 2026-10-18 04:34:00
Quasar RAT (ThreatFox Abuse.ch)

gatex.colatv88xb.cc Hostname

modified 2026-10-18 04:33:53
Quasar RAT (ThreatFox Abuse.ch)

may-biol.gl.at.ply.gg Hostname

modified 2026-10-18 04:33:50
Quasar RAT (ThreatFox Abuse.ch)

alexnikolov-51855.portmap.io Hostname

modified 2026-10-18 04:33:47
Quasar RAT (ThreatFox Abuse.ch)

minecraft.frslink.com Hostname

modified 2026-10-18 04:33:43
Quasar RAT (ThreatFox Abuse.ch)

filipmntz-49636.portmap.host Hostname

modified 2026-10-18 04:33:35
Quasar RAT (ThreatFox Abuse.ch)

cheezeyballs.zapto.org Hostname

modified 2026-10-18 04:33:35
Quasar RAT (ThreatFox Abuse.ch)

capnext.in Hostname

modified 2026-10-18 04:33:30
Quasar RAT (ThreatFox Abuse.ch)

rigoc45241-20031.portmap.host Hostname

modified 2026-10-18 04:33:30
Quasar RAT (ThreatFox Abuse.ch)

buildthework.theworkpc.com Hostname

modified 2026-10-18 04:33:05
Quasar RAT (ThreatFox Abuse.ch)

prxprodquasar.zapto.org Hostname

modified 2026-10-18 04:33:04
Quasar RAT (ThreatFox Abuse.ch)

latticino.hopto.org Hostname

modified 2026-10-18 04:33:02
Quasar RAT (ThreatFox Abuse.ch)

weinstallsolar.nl Hostname

modified 2026-10-18 03:50:56
Quasar RAT (ThreatFox Abuse.ch)

ok99.io Hostname

modified 2026-10-18 03:16:55
Quasar RAT (ThreatFox Abuse.ch)

zengersro.com Hostname

modified 2026-10-18 03:13:31
Quasar rat (Maltiverse Threat Observatory)

teamoswin.com Hostname

modified 2026-10-18 03:13:31
Quasar rat (Maltiverse Threat Observatory)

age-showcase.gl.at.ply.gg Hostname

modified 2026-10-18 02:52:24
Quasar RAT (ThreatFox Abuse.ch)

vk10.waizerfly.com Hostname

modified 2026-10-18 02:22:09
Quasar RAT (ThreatFox Abuse.ch)

97ace21490ce1ae8d8f5ea4980b715d9f1df3770eb1bf31f4dd6ea050cc4c208 Sample

modified 2026-10-18 01:07:43
QuasarRAT (Cyber Threat Alliance) · Generic Malware (Cyber Threat Alliance)

1538fb80f66854b36eafb2a96e232bd72d7edad063c7a8f88941e0a97423d831 Sample

modified 2026-10-18 01:05:29
QuasarRAT (Cyber Threat Alliance) · Generic Malware (Cyber Threat Alliance)

code1.ydns.eu Hostname

modified 2026-10-18 00:40:53
Quasar RAT (ThreatFox Abuse.ch)

liano.co.in Hostname

modified 2026-10-18 00:40:43
Quasar RAT (ThreatFox Abuse.ch)

offered-poland.gl.at.ply.gg Hostname

modified 2026-10-18 00:40:37
Quasar RAT (ThreatFox Abuse.ch)

zzzttv.ydns.eu Hostname

modified 2026-10-18 00:40:37
Quasar RAT (ThreatFox Abuse.ch)