Extracted

• • Target

    2024-11-02_ab3645924d8778ff67010227f5ca5e00_icedid_poet-rat_quasar-rat_xrat

  • Size

    4.8MB

  • MD5

    ab3645924d8778ff67010227f5ca5e00

  • SHA1

    1e51f15f3f0b6c44b12eb21e50cfb8886ffd7e8a

  • SHA256

    96c634c1e1c36808ad958b40621d8c7a13c6547ab74a5c9ccb6244a116d78116

  • SHA512

    a6df667e691213fae398a701f083c0011f2d98aff78795aa71ea4b3f94f0781c83d109c889f9ff14f8e729428cdfb07bb235c21d52b0a90cd51be763fea0192d

  • SSDEEP

    98304:8vkNM5qKvr22SsaNYfdPBldt6+dBcjHtKRJ6BgIbzZ2IbzZY:lCM7jGIrXK

  Score

  10^/10

  quasaroffice04discoveryspywaretrojanupx

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  • UPX packed file

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  behavioral1behavioral2