Extracted

• • Target

    4a04da4d657c3c6bc45ea42cfef67039cd51173159ce7b707467f69146e086f9.exe

  • Size

    3.1MB

  • MD5

    641cb02c429feb106094750765d0d6af

  • SHA1

    db5be32e7ef7c5e93b7ef4f06bd6854f3a393cbd

  • SHA256

    4a04da4d657c3c6bc45ea42cfef67039cd51173159ce7b707467f69146e086f9

  • SHA512

    8c4baa95d860c22e0ede96da48136db417f61ec6b19fccb847d0317f775e77d1e299f80e2f19230055fabf9e91ec8dbb2d90b055ddeb75b4c714c971afbf37b9

  • SSDEEP

    49152:TIMa8I9WtxU/Pom7ZlHMgK+YISxoJXFacCbG1JoQoGdLTHHB72eh2NT:TI38I9WtxU/Pom7ZlHMg8ISxoJXEcC4

  Score

  10^/10

  quasaroffice04spywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar payload

  • Executes dropped EXE

  behavioral1behavioral2