Extracted

• • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    b08447d3d65d6378339c7a9836c53b32

  • SHA1

    6b15e2cfa3080b825aa0c9e84649d9ba1bcbfc7c

  • SHA256

    d52810d59dcc0f3c448941207cd1c62ebcf7c096613db2422179e2a0d1e6f6d8

  • SHA512

    a1a49c87c99d5ea0b506d43e855e4abd32d77108636d1d488e8acef0aa24c74e8352f7a034f12e7f32b09674be8d7a88af245905533123bc7f363f9a99db2f09

  • SSDEEP

    49152:bvylL26AaNeWgPhlmVqvMQ7XSKsCm1JTLoGdiTHHB72eh2NT:bvqL26AaNeWgPhlmVqkQ7XSKsC2

  Score

  10^/10

  quasartutorialspywaretrojandiscovery

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Executes dropped EXE

  • Enumerates connected drives

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in System32 directory

  behavioral1behavioral2