https://alertoverload.com/categories/quasarrat/ Recent content in QuasarRAT on Alert Overload Hugo en-us Sun, 23 Aug 2026 00:00:00 +0000 https://alertoverload.com/posts/2026/08/lab_deploying_ransomware/ Sun, 23 Aug 2026 00:00:00 +0000 https://alertoverload.com/posts/2026/08/lab_deploying_ransomware/ <h1 id="lab-deploying-ransomware-via-quasarrat-and-clickfix">Lab: Deploying Ransomware via QuasarRAT and ClickFix</h1> <p>SKIP TO LAB MATERIALS IF YOU WANT TO DO THIS BLIND <a href="#materials">Questions and lab material can be found here.</a></p> <h2 id="scenario">Scenario</h2> <p>An employee at Bajiri Corp has logged into their computer and found that none of their files can open and that there is a ransom note on the desktop. The IT team was able to scope out the incident to the device and have taken a memory capture, used KAPE to gather evidence, and has also provided the elastic logs for what they believe is the incident scope.</p>