Extracted

• • Target

    PC_Booster.exe

  • Size

    3.1MB

  • MD5

    81d8571af28e42e2bbe60b5118173da6

  • SHA1

    a826876a268bb7ebcf67b050707ff8a8e05ee6ef

  • SHA256

    5fccda50065844a012e1425d3d9d60b608c6d5dc07514d32d04b1c55a1eade36

  • SHA512

    b6f2dc77b046e4577a996495a6a5589f6ea263e61570ff362f2fb3386dc2b5c80c63ee6ab0678b36e1e11f7a3e46a9c5ed2cf33a5fb523e6afaed0f5a38da347

  • SSDEEP

    49152:KvyI22SsaNYfdPBldt698dBcjHF9rwmCPLoGZB3voTHHB72eh2NT:Kvf22SsaNYfdPBldt6+dBcjHF9rQ

  Score

  10^/10

  quasaroffice04spywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Executes dropped EXE

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2