Extracted

• • Target

    FlashingSoftwarePRO.exe

  • Size

    3.1MB

  • MD5

    cee9f55f2ed2ad11bf3acb650277237a

  • SHA1

    3515900f7d4ba68720cb506200f2dcff401a9a6e

  • SHA256

    527ebcd94bab6471192fa739e3ee318a7781c79c5a266b0795214bce0398ed35

  • SHA512

    da46b87edbf315b88f069d2670c440fb9ea76a1bde9742855fcf80c7bbad5ea4d895c90d97d62a57782cd2572f3db7c90667aabe34e37c6bf543da6ea323d906

  • SSDEEP

    49152:/vJuf2NUaNmwzPWlvdaKM7ZxTwqky3EfsKk/WPIoGd0THHB72eh2NT:/vkf2NUaNmwzPWlvdaB7ZxTwqkyAw

  Score

  10^/10

  quasarsvchostdiscoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Drops file in System32 directory

  behavioral1