Extracted

• • Target

    254cf51a4dbea382bb7ec299a394047fb52bbb145b6cbb2d91af8fe63475c025

  • Size

    3.1MB

  • MD5

    5b7e88af055d1b4337e59507c8eba187

  • SHA1

    588cc4e8665f86e5fe1b9bf50597bf67e564094e

  • SHA256

    254cf51a4dbea382bb7ec299a394047fb52bbb145b6cbb2d91af8fe63475c025

  • SHA512

    caa8217152f4aee869d17cbde5d1eb0508737d70a702055724dad7389b63057d754c98a32f9d48cdee98bc35f3b3ba3013392782acdafcf372fc2becb7b71ae6

  • SSDEEP

    49152:mvyI22SsaNYfdPBldt698dBcjH3MQmRmzJjoGdSd7loTHHB72eh2NT:mvf22SsaNYfdPBldt6+dBcjH8QmgA

  Score

  10^/10

  quasaroffice04spywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar payload

  • Detects Windows executables referencing non-Windows User-Agents

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers.

  • Detects executables containing common artifacts observed in infostealers

  • Executes dropped EXE

  behavioral1behavioral2