Extracted

• • Target

    el nuevo buildeamos iejg.exe

  • Size

    3.1MB

  • MD5

    b6968e0331d2b8da011ef8fec9ea377f

  • SHA1

    3219222763a3ef6f2c07a047c00ba9e4eb01c533

  • SHA256

    d398dbc7050f5f465a6c25d09df0aefd90a877c9b235318a1829c9ce5139c034

  • SHA512

    8df4f22da3a9950341df9c37661130f59a7d757b88066e8129bec09ef678bba22efd74ec2309eaeddf96008c80b838f32afc00b80f47ac932f441635ac78f828

  • SSDEEP

    49152:7v+lL26AaNeWgPhlmVqvMQ7XSKSScpEIoGdF0THHB72eh2NT:7vuL26AaNeWgPhlmVqkQ7XSKSScpl1

  Score

  10^/10

  quasaroffice04discoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1