Extracted

• • Target

    SGVP Client program.exe

  • Size

    3.1MB

  • MD5

    1ece671b499dd687e3154240e73ff8a0

  • SHA1

    f66daf528e91d1d0050f93ad300447142d8d48bc

  • SHA256

    c72756ca6344b675d8951b16ff305d1f8e145bddac1dcac101bfdb79939831a1

  • SHA512

    0cb5d1084e5e8ec0c30e6d5c559f5a0fd509f96bd5cec7b311d72b8d279e2ffcd9ffbbacb5b428d5ee84aa339743535db0d70afaa3008c6d46508ccaae37adcc

  • SSDEEP

    49152:7vTz92YpaQI6oPZlhP3ReybewoqC01JWRoGdl2XTHHB72eh2NT:7vn92YpaQI6oPZlhP3YybewoqCZ

  Score

  10^/10

  quasarsgvpdiscoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2