Extracted

• • Target

    6e0afb3139f4a822fb8e62492fbff4f4_JaffaCakes118

  • Size

    348KB

  • MD5

    6e0afb3139f4a822fb8e62492fbff4f4

  • SHA1

    8acc07d47261f85b951beae1318e8a06ee5b1e62

  • SHA256

    489d79372f4dd063454ee6345567b4cc799262ccbc28ac56ccde8ab8376bdb4f

  • SHA512

    6ea362c2c8f7d4a3ac22cde95e2680e102f36e775cc6dadabbd3d71912c7c0e5034426c78c55261b5910512b7a54273edc9b04c872516f001dc2cb03f68f5393

  • SSDEEP

    6144:ocNHXf500MoE0y0AsNibhU7Z2eCwKlJ8zVefSuDi:Nd50N0yIWUpCll6VefRDi

  Score

  10^/10

  quasarmonero1spywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2