Extracted

• • Target
    SeroXen_Cracked-main.zip
  • Size 8.2MB
  • SHA256 deadf947dc6be85497b30473dcd6ab9a711b2e0a02df847c25f8fd15589a9c8b
  • MD5 be2e38fdf09445fcc563380b34456834
  • SHA1 9576198da00fbfd930f2f9700759e290b793e3c6
  • SHA512 96bcaafcda5bafe1fc9f6db1eb914517f77c4ddf4767689f21ad0910869005e32ba071e0c682d12b7dd4dfff0ae26a0eaa85236aaf9805b4db7050a93af18c0b
  • SSDEEP 196608:Fi1/tl0L6Tt768UDVRNvlzZVUuphoFPgEHB4+7SUTAsI1SMLhs:UVl0Y1686NvpWFSKLI1Ps
  • MD5 SHA1 SHA512 SSDEEP

  Score

  1^/10
  behavioral1
• • Target
    SeroXen_Cracked-main/SeroXen Crack.rar
  • Size 8.2MB
  • SHA256 306d942083d3df861ab01b8ea413c8059df0e9ef95b73ed0dddfc8be5a8567e7
  • MD5 a28bbc6271992ffc4dbd706fca6034fe
  • SHA1 6a8f5bbce1d17fd37f7dfb59fffa1c16c3fccd17
  • SHA512 22298e426eed578fa73585461033e3d1a597f7e93640d033e3d03d449974c4f25a70da463c0c69698faa1d546d4e75cb13312ac17c0d9ae51c69e32a0d20c213
  • SSDEEP 196608:Hi1/tl0L6Tt768UDVRNvlzZVUuphoFPgEHB4+7SUTAsI1SMLhR:aVl0Y1686NvpWFSKLI1PR
  • MD5 SHA1 SHA512 SSDEEP

  Score

  8^/10

  defense_evasiondiscovery

  • Downloads MZ/PE file

  • Executes dropped EXE

  behavioral2
• • Target
    SeroXen Crack/SeroXen-install.bat
  • Size 12.6MB
  • SHA256 78b0a14a882dec287c0dc5a294ad02a4a5aaa0d130839d49f282c7d61069471f
  • MD5 898f49c739026123b6a3811fa31abe70
  • SHA1 31ff6036b40d70d21cb1c4c0163cba0d4c720551
  • SHA512 a9aa2bf15db84361f315156ee6386cac49c14c2449a72e2f50b2e0b8d100781019c246c03a38a37d5dfc71a7c1c5451457faba074d1a875cab615ecb8d3e453d
  • SSDEEP 49152:sW7ldCjqzV0qZpSjVbHDGYxqXTQPJee/X5nerh1gnfFijx6ygGSPlPNEIKlfuK1u:i
  • MD5 SHA1 SHA512 SSDEEP

  Score

  10^/10

  quasarv2.2.5 | seroxendefense_evasiondiscoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar payload

  • Suspicious use of NtCreateProcessExOtherParentProcess

  • Suspicious use of NtCreateUserProcessOtherParentProcess

  • Deletes itself

  • Executes dropped EXE

  • Indicator Removal: Clear Windows Event Logs

    Clear Windows Event Logs to hide the activity of an intrusion.

    defense_evasion

  • Hide Artifacts: Hidden Window

    Windows that would typically be displayed when an application carries out an operation can be hidden.

    defense_evasion

  • Suspicious use of SetThreadContext

  behavioral3