Extracted

• • Target

    83e48dca5574b8875b8efd202de1841263c97e38ccf8866649e0cf9b3d894378N

  • Size

    349KB

  • MD5

    715f939575713752a183aa75ff78e2b0

  • SHA1

    11ce91d273eb5af1a87ed43af27cb12a971ecdcd

  • SHA256

    83e48dca5574b8875b8efd202de1841263c97e38ccf8866649e0cf9b3d894378

  • SHA512

    b844ffd4d0a220033886ce2096c8c61c44e86441cf811336d1be08c5160315da4cb7a46bebf5188e51e12b386e4f4f184905a18b08e96499eabdb8814f006011

  • SSDEEP

    6144:JK2J10qdSlEc39HGICa7TE3nKoICeeS2bwqHO4baeLV9w0Z:JKFL03nKoICeeSuOSLg0Z

  Score

  10^/10

  quasarcotizaciones23discoverypersistencespywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2