Extracted

• • Target

    2024-11-01_c7eb615f6cfae5aab2205d79754b008a_icedid_poet-rat_quasar-rat_xrat

  • Size

    4.6MB

  • MD5

    c7eb615f6cfae5aab2205d79754b008a

  • SHA1

    9fbe9ec9b672c094fb6a92cbc2d1750c4a287a3f

  • SHA256

    92e22f42d2a793656eef26bdcc3804da16f0c9d75e32813200bda77b88327a1a

  • SHA512

    ba499a34afb860c1be0449c45ae2e9d37012c1ddd1fc64671c205be3d45680e67bd200816322c1987a0dd8949f43aaede20a274c45ef265f963b3cbd8efa3fbe

  • SSDEEP

    98304:Si0IdaI3Wvr22SsaNYfdPBldt6+dBcjHtKRJ6BSIbzZyIbzZY:NaM7jGIZDK

  Score

  10^/10

  quasaroffice04discoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2