Extracted

• • Target

    e23474d4ced13b09f65a3b139a26a5cd8058ecb4868cd3341f2f66753c058e52N.exe

  • Size

    3.1MB

  • MD5

    6994654133f79a7a2b10a366fa153dc0

  • SHA1

    57fc57f78b20b052f109ad3cb2201cd23c389fa4

  • SHA256

    e23474d4ced13b09f65a3b139a26a5cd8058ecb4868cd3341f2f66753c058e52

  • SHA512

    e9008515064390bf63c9fb03bd97d478863633eee6ee97b919a3070bf1231d7accd4ed5b9aa9392763d754b68717346c64aec4bb16b122598c7888d9d97f4b6d

  • SSDEEP

    49152:DvilL26AaNeWgPhlmVqvMQ7XSKnIRJ6ibR3LoGdWhNTHHB72eh2NT:DvaL26AaNeWgPhlmVqkQ7XSKnIRJ6cY

  Score

  10^/10

  quasartriagediscoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2