Extracted

• • Target

    NezurExternal.exe

  • Size

    16.7MB

  • MD5

    16633521375e4c41f42795772b2f3d8c

  • SHA1

    4d91dc868bdcf8ac30e497fb228c7da7e727e8c9

  • SHA256

    c50571f4804e26df25659624ee28ab859eb10fa1040c85d6f484e236a561798a

  • SHA512

    63ec8de664fd2aa9bd43e6e7ecf3d3e451da942852b333810a80cf38ee1e2f79d3760cbc8d42e2961c3538539571a26114597caba6396205f5924941fb90ea8c

  • SSDEEP

    196608:7dtABVEjBCvHs1jgGbd/o+XhZdxc4dKFJvm80Qn3fgjtak9+rrtRyomypejC4zQT:L+s1ho+Xh1c4doJfRfgjtaRrJRyjNs

  Score

  10^/10

  quasarnezurdiscoveryspywarethemidatrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Themida packer

    Detects Themida, an advanced Windows software protection system.

    themida
  behavioral1