Extracted

• • Target

    40bc721618bfa9595331b7b7bb3a5955be4d3c7e9ca58a063769e16c5b2e605a

  • Size

    4.7MB

  • MD5

    280ad7fce13d25ab4190070bbae22e12

  • SHA1

    474920d6b01a092845815aec815519e7792444ce

  • SHA256

    40bc721618bfa9595331b7b7bb3a5955be4d3c7e9ca58a063769e16c5b2e605a

  • SHA512

    53d58a7814ccad7a23cb466e56ff2e1f016089fdc5c2bb54d3ccb61ba77475538388a5236b24db07f2ceaca6c39eb3911e7915d13be15f633388cf1bb7b77d5a

  • SSDEEP

    98304:yZoSzXIZ7Svr22SsaNYfdPBldt6+dBcjHtKRJ6BLIbzZhIbzZY:Gw7UM7jGIUAK

  Score

  10^/10

  quasaroffice04discoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar payload

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2