Extracted

• • Target

    niggarab.exe

  • Size

    3.1MB

  • MD5

    448ec0f3a024768ba82ca362ac35e54f

  • SHA1

    6b0f1d6976283f31ce29c83ce5bc2f5bc2e94a49

  • SHA256

    1d540999c78833cce0176eef65096caf459d4cd56472c068ce728868653aac8f

  • SHA512

    cbb7fc6143e59c3b376dee87435ae19c987f130926e01d0c8ddf6ce303488047697f35ad3d26d0f55a0894a74271fb9b52beb859959e05f5709dbde75eb8aae7

  • SSDEEP

    49152:Xv7cfX2hcawDEhPLl8r/ptXpga584Qx9E1zxk/Jx6oGdRTHHB72eh2NT:Xvwv2hcawDEhPLl8r/XXpga584Qx3U

  Score

  10^/10

  quasarjaffacakes лох, сдохнет от спида!!! i hate niggersspywaretrojandiscoveryphishing

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • A potential corporate email address has been identified in the URL: httpswww.youtube.com@WarGackcbrd1

    phishing

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2