Extracted

• • Target

    Panel Ejecutador MTA 3.14.exe

  • Size

    3.3MB

  • MD5

    5791d405ca0a97a89eeaeb4f2be628be

  • SHA1

    a012d40aaaa01db12a83b0e4408d012fd383dd0b

  • SHA256

    6c67a1bf1d558b31a790e4bdcef062c9b49f00a1b3d7361dfc8308d55b87bc5d

  • SHA512

    3971447d6a5f1ffe51bb1acc0d2525aa5bca521358c67828e6bd983d68e8c22dfa83ab49109575bc113e13de861682af563a3ed21e5ef48cce1bfcdb8f1f2afd

  • SSDEEP

    49152:ovSI22SsaNYfdPBldt698dBcjH3xcEf8Kk/Ja1oGd58THHB72eh2NT:ov/22SsaNYfdPBldt6+dBcjH3xa8

  Score

  10^/10

  quasaroffice04discoveryspywarestealertrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Executes dropped EXE

  • Reads WinSCP keys stored on the system

    Tries to access WinSCP stored sessions.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1