Extracted

• • Target

    1ab78e4debf0e9739c8d342516ce64be08aefc62e4338119eaed632646dc14caN.exe

  • Size

    4.2MB

  • MD5

    3cc22c210a4508dd03a02a8072633a90

  • SHA1

    5ebf943c456a386d6e7736770f14d3b53440ace2

  • SHA256

    1ab78e4debf0e9739c8d342516ce64be08aefc62e4338119eaed632646dc14ca

  • SHA512

    5207b064bfd1b07a9a08234e18ae12923ae83e26d2d5bb41683d418cd0d94198847847f707c386b3a8c8576c2e5ab994672dfb2c3e7bf251b3067d30fa44a352

  • SSDEEP

    24576:DJwau91PHKWGydL38EqXKzr2gduRXFzP5AtTQpFX+m5fi69fffZctAv7vIjOvtXJ:9mdj09Mg9wcWRVpuIRMV

  Score

  10^/10

  quasaroffice04discoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Suspicious use of SetThreadContext

  behavioral1behavioral2