Extracted

• • Target

    JY7XH_Client-built.exe

  • Size

    3.1MB

  • MD5

    f9fd797dbef56a3900d2fe9d0a6e2e86

  • SHA1

    c5d002cc63bd21fa35fdad428ca4c909f34c4309

  • SHA256

    b2de1e13497b1864e100fea605fa1136adc6f782b1dea5f6fe5f11656b098c0e

  • SHA512

    c4d170855397e2e62d754883b2caab00d14f58787463924141d2077997ee03b25cd752565354c1c4cbace637cf1c053c45a162d0b61b31caa73f1ec70b998ce1

  • SSDEEP

    49152:ivkt62XlaSFNWPjljiFa2RoUYIobRJ6MbR3LoGdNwhTHHB72eh2NT:iv462XlaSFNWPjljiFXRoUYIobRJ6WK

  Score

  10^/10

  quasaroffice04discoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2