Extracted

• • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    403d20c63335b299c8bcbe4c6e49231e

  • SHA1

    b581c2ca151a033dd10dca736ea76cf29278f498

  • SHA256

    db857bc6602026ddfd794ec8c167ede510ca24d46d1de71fac1357c1f4f34bfb

  • SHA512

    68418311a5e6cf5a81205513cb2beefc164a913c8f361c7405698948977f77ef4e682aeef651844f9e2da1b6fba978d6f5b97f9fe0780d6b0b91d34a0ea6570a

  • SSDEEP

    49152:rvrhBYjCO4Dt2d5aKCuVPzlEmVQL0wvwkadReEErHgk/uVkoGduLTHHB72eh2NT:rvjt2d5aKCuVPzlEmVQ0wvwfdRe6C+

  Score

  10^/10

  quasaroffice04spywarestealertrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Executes dropped EXE

  • Reads WinSCP keys stored on the system

    Tries to access WinSCP stored sessions.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1