This article was originally published on ThreatChain — decentralized threat intelligence.

It's open-source on GitHub. It's also on thousands of infected machines right now, giving attackers full remote control.

A new QuasarRAT sample was identified by threat intelligence feeds on 2026-05-10 18:14:01. This post breaks down what we know about the specific sample, how to recognize related activity on your network, and what to do if you or your organization might be affected.

The Sample at a Glance

Field Value

SHA-256 00e6af4b4e3df4c09673e4492483f3cec7bb27b4565bdd112973fb4952ad897c

File name 7z2600-x32.exe

File type exe

Size 3.09 MB

Origin (first observed) VN

First seen 2026-05-10 18:14:01

Family QuasarRAT

Tags botnet, c2, exe, QuasarRAT, trojan

VirusTotal detection 58/75 engines flagged malicious

What QuasarRAT Does

QuasarRAT is a malware family observed delivering malicious payloads to Windows systems.…