Extracted

• • Target

    RobloxCrasher.exe

  • Size

    3.2MB

  • MD5

    ebda07e93515d2a92cf0f34bee690b43

  • SHA1

    56b44e24857999dc97a26b7b8d9044b1235fd167

  • SHA256

    aebe8489a53693d4466be30dfd930c2cbc79a21687b228a8f304815906de02d6

  • SHA512

    f3c01b7cae001b3630aa4959844724368e8f7244630a4867758d310c9b5f60a17b471ef84df356539ce5e4eb6d6ac9577b1e4a0c71e24826a8da0a84ff2ed54e

  • SSDEEP

    98304:isdJl5i8RDSoqm7GvvZX7BnmrcdMWu2tVKsL:3Jl5jyGyVmrCMWjtMsL

  Score

  10^/10

  quasarrobloxdefense_evasionspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Obfuscated Files or Information: Command Obfuscation

    Adversaries may obfuscate content during command execution to impede detection.

    defense_evasion
  behavioral1behavioral2