Extracted

• • Target

    Modification11910275.exe

  • Size

    3.1MB

  • MD5

    fa9b1524e725c4a251d07007f15fa947

  • SHA1

    5c023619d8180b611acb544fa1cd8bd31de9e61c

  • SHA256

    0cbcab350f25f5764dc967cf6f764eccdd094b1f8ca14d60a731713ace6b1aec

  • SHA512

    dac63f0970092186a909dafeb75cee3e1ad3b393984cf78a1d88e339a39ef235567f74b7a874b237762b8a46e74f8cb319add4bcbc4bdf8f76ec8e1476fb44db

  • SSDEEP

    49152:nvKlL26AaNeWgPhlmVqvMQ7XSKrCW1JeLoGdeSTHHB72eh2NT:nvyL26AaNeWgPhlmVqkQ7XSKrCN

  Score

  10^/10

  quasarbotspywaretrojandiscovery

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1behavioral2