Extracted

• • Target

    PAR4DISE.bat

  • Size

    11.6MB

  • MD5

    fe3925c1f7ab685f15bac7af0ce98ede

  • SHA1

    91e9831c81d150ba337bc03dbe072e7a58403343

  • SHA256

    44091a677e3d6fa0e0c575856a1431578f5755ed98c12f35429905e43da59be0

  • SHA512

    18c9cd2d7444f8bd09825a2c027a662fc6a027bd9ebaf8b6bb8ada8d8b2977f67f1827a5fa73b151ff58e5fce51f42f51987f8b5dcc78795a3e2df69543ec9fd

  • SSDEEP

    49152:siq+kJMxngSl5DHn7UbM+K7ipjPWQB2VBWdIpmqu8Modtu7CWO2e3BifetlEzKPf:7

  Score

  10^/10

  asyncratquasarv15.5.0 | seroxenratspywaretrojan

  • AsyncRat

    AsyncRAT is designed to remotely monitor and control other computers written in C#.

    ratasyncrat

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar payload

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Async RAT payload

    rat

  • Executes dropped EXE

  • Drops file in System32 directory

  • Suspicious use of SetThreadContext

  behavioral1behavioral2