Extracted

• • Target

    Virus.exe

  • Size

    348KB

  • MD5

    325f748d4e40fd993021c4a39e60384d

  • SHA1

    665c5980233d2081ecb638a5601950da52aec632

  • SHA256

    f3d4f0a9c0f837998e9ac15b067a74fa15cea74db186e1067fd55eea657ae3f3

  • SHA512

    5dfadcb320f93d8990e70f219cb6ecfeb0e8dc0bb90e3dbdbe4977e0ce8b029a1aeab91f272476f1dbab16191be287d072d8cfedd550893c9bdde268b1e02f95

  • SSDEEP

    6144:s16bPXhLApfp07Dbj82MGlfCtfb5vJtTamdYxM4HX2vuJrq:QmhApSPeFKmd4rHXXrq

  Score

  10^/10

  quasarhackeado papudiscoveryspywarestealertrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Executes dropped EXE

  • Reads WinSCP keys stored on the system

    Tries to access WinSCP stored sessions.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1