TF-1812065
high
📛 Threat Title
Quasar RAT: Domain name that delivers a malware payload go88x.cv
Description
Indicator that identifies a malware distribution server (payload delivery). IOC type: Domain name that delivers a malware payload. Attributed malware: Quasar RAT (aliases: CinaRAT,QuasarRAT,Yggdrasil). Confidence: 75. First seen: 2026-05-14 03:36:00 UTC. Reporter: haruharu.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
go88x.cv
VT: VT base fetch failed: HTTPError: 429 Too Many Requests for domains/go88x.cv
UrlVoid 4 / 35
IOC database
- Type
- domain
- Value
go88x.cv- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Domain name that delivers a malware payload attributed to Quasar RAT
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Too Many Requests for domains/go88x.cv
References (3)
- Malpedia profile Threatfox IOCs/Threats
-
ThreatFox IOC page
Threatfox IOCs/Threats
Indicator that identifies a malware distribution server (payload delivery). IOC type: Domain name that delivers a malware payload. Attributed malware: Quasar RAT (aliases: CinaRAT,QuasarRAT,Yggdrasil). Confidence: 75. First seen: 2026-05-14 03:36:00 UTC. Reporter: haruharu.
- External reference Threatfox IOCs/Threats
Remediations (10)
-
web:any.run
Quasar is a remote access trojan is used by attackers to take remote control of infected machines. Follow live malware statistics of this trojan and get new reports, samples, IOCs, etc.
-
web:cyberint.com
The risks of Quasar RAT infection include unauthorized access to personal and financial information, loss of data, compromise of important accounts, installation of additional malware , and potential damage to the computer system.
-
web:hunt.io
Explore Quasar RAT , an open-source remote access trojan used in cyber espionage. Learn about its features, distribution, and mitigation strategies.
-
web:socprime.com
Summary Quasar Linux (QLNX) is an advanced Linux remote access trojan that combines a user-space and eBPF rootkit with a PAM backdoor and broad credential-harvesting capabilities. The malware supports fileless execution, process name masquerading, and several persistence techniques that help it remain hidden on infected systems.
-
web:techowlshield.com
Our threat research analysis of Quasar Linux (QLNX) found a previously undocumented, full-featured Linux Remote Access Trojan. Despite sharing the " Quasar " name with the well-known open-source Windows RAT (C#/.NET), QLNX is an entirely separate native Linux implant purpose-built for one mission: compromising developer and DevOps workstations to ...
-
web:threatfox.abuse.ch
Quasar RAT IOC: go88x.pro ( domain ) You are viewing the ThreatFox database entry for domain go88x.pro.
-
web:www.cybermaterial.com
Quasar RAT is an open-source malware that has gained notoriety for its dual-use capabilities. Developed in C# and publicly hosted on GitHub, Quasar allows legitimate users, such as IT professionals, to access and manage remote systems.
-
web:www.scribd.com
Quasar RAT is a full-featured remote access trojan written in C# that has been used by state-sponsored threat groups since 2014. It provides capabilities like capturing screenshots, recording webcam video, and stealing passwords. The document examines the evolution of Quasar RAT's source code and configuration, provides a technical analysis of its capabilities, and discusses detection ...
-
web:www.splunk.com
Uncover how to identify malicious executable loaders that use steganography to deliver payloads such as Quasar RAT .
-
web:www.trendmicro.com
TrendAI™ Research breaks down Quasar Linux (QLNX), a previously undocumented sophisticated Linux RAT with low detection rates. In this blog, we examine a full-featured Linux threat incorporating a rootkit, a PAM backdoor, credential harvesting, and more, revealing how this malware enables stealthy access, persistence, and potential supply-chain attacks.
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.