Extracted

• • Target

    492a651e5ae2020b3b7fd51861adf68402089d050e083c3a9ef1a9866256000c.exe

  • Size

    3.1MB

  • MD5

    b77d847b1d41cde07f81168c7addbb10

  • SHA1

    2d5c614efdef7ab59fa5fb665d6ed1a79502b97f

  • SHA256

    492a651e5ae2020b3b7fd51861adf68402089d050e083c3a9ef1a9866256000c

  • SHA512

    6fff7c253c543e370dcb459f0cc66003f57fbc35f40af5744deca97a2c593bf0881f96c845bbc15963e9eb81a652aec78a500ea41f2d1af5fbb5f0ec04c6c9f6

  • SSDEEP

    49152:nvelL26AaNeWgPhlmVqvMQ7XSKqaRJ61bR3LoGdEjTHHB72eh2NT:nvOL26AaNeWgPhlmVqkQ7XSKqaRJ6H

  Score

  10^/10

  quasarruntimebrokerspywaretrojandiscovery

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2