Extracted

• • Target

    841f178c15802a89ad903f05c5148bca7ef49efd9113d636cad35067be4a4164.exe

  • Size

    3.1MB

  • MD5

    1d5b1579c6cf546964a067edf15d75e6

  • SHA1

    1d3e8bb39c7ad10f864efe0adfe8c4028a6fa332

  • SHA256

    841f178c15802a89ad903f05c5148bca7ef49efd9113d636cad35067be4a4164

  • SHA512

    6e9d6228928775787a4d25c1a82d36b68bb082c04cb08afb2abe93aff4d54fb25d0e216a5eb7bc11f260bfe3191259f61261556620895b5fc96e76438e354f02

  • SSDEEP

    49152:6v+I22SsaNYfdPBldt698dBcjH7OmumzRfoGdRTHHB72eh2NT:6vz22SsaNYfdPBldt6+dBcjH7Oml

  Score

  10^/10

  quasaroffice04discoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2