Extracted

• • Target

    2024-11-10_ebe00803d4c9351a90a338c9d0f10f1a_icedid_poet-rat_quasar-rat_xrat

  • Size

    4.7MB

  • MD5

    ebe00803d4c9351a90a338c9d0f10f1a

  • SHA1

    f0afa3c734f00ba9b3a3b406e78e5280abc7aa4c

  • SHA256

    1e2eeb66d4da9c9c4111c60fe18184d5b864a2e2708999e8e68cc04239a57ecc

  • SHA512

    b0166984e12a553986bce8e5e1343a2c4dba5d8c9d34158448f9aa7cf5412c5a3afe53801e2047569eca3ad2fb9a1e14ee3ee8f6c41669f139f8babf26cc28b6

  • SSDEEP

    98304:v3ZRzWRZvr22SsaNYfdPBldt6+dBcjHtKRJ6BxIbzZCIbzZY:rEM7jGIefK

  Score

  10^/10

  quasaroffice04discoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Drops startup file

  • Executes dropped EXE

  • Loads dropped DLL

  behavioral1behavioral2