Extracted

• • Target

    29fb5f7b7dfb67eef0c61a9399135775faa115fbf3671cf8a58cc50c049657e7

  • Size

    3.1MB

  • MD5

    88fbaddac03a7dcf64d5c3d35de20dab

  • SHA1

    52c48bb6e40d746de55a749dc5e6b5ee50da2b6b

  • SHA256

    29fb5f7b7dfb67eef0c61a9399135775faa115fbf3671cf8a58cc50c049657e7

  • SHA512

    86ac1ca0d3d96b17750e86b289b6e214d6d0f98c1a0b465caac767b3a08ace96fcb6baa5c0a984e0bbe5c33e5255971ac32dcca332e32df59085167bbf83ce79

  • SSDEEP

    49152:avyI22SsaNYfdPBldt698dBcjHQAvGEEsMkCqMLoydb5THHB72eh2NT:avf22SsaNYfdPBldt6+dBcjHQAvzSx

  Score

  10^/10

  quasaroffice04spywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar payload

  • Detects Windows executables referencing non-Windows User-Agents

  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers.

  • Detects executables containing common artifacts observed in infostealers

  • Executes dropped EXE

  behavioral1behavioral2