Skip to content
MalwareWiki

Malware

QUARTERRIG

aka MUSKYBEAT · STATICNOISE

A stager used by APT29 to download and run CobaltStrike.

QUARTERRIG, also known as MUSKYBEAT, STATICNOISE, is a Windows malware family operated by APT29.

Background

This is a stager that APT29 employs to retrieve and execute CobaltStrike. In this naming scheme, MUSKYBEAT denotes the in-memory dropper component, whereas STATICNOISE is the eventual payload, acting as the downloader.

Source: Malpedia (Fraunhofer FKIE).