Extracted

• • Target

    f853596287c8f345eba943acdc0747f19bed0e5ebc041bc0ab1aa61413d970d9.exe

  • Size

    3.1MB

  • MD5

    df7b0e428b11f8aa5102168e65156a3b

  • SHA1

    7a48d280aee1b17e8a2e36b21c7441d4670cc7bc

  • SHA256

    f853596287c8f345eba943acdc0747f19bed0e5ebc041bc0ab1aa61413d970d9

  • SHA512

    c3dee0a61bc87eb230dce708172c95c5b3209d6d3c07198c2b92b68e5bd6d10e0ddf5193c4ad98be3bcb24e9627ef936de2a78274f477b33cacfe5117dc97abb

  • SSDEEP

    49152:HvyI22SsaNYfdPBldt698dBcjH+a071Jv0oGdPZTHHB72eh2NT:Hvf22SsaNYfdPBldt6+dBcjH+a0A/

  Score

  10^/10

  quasarbrouteurspywaretrojandiscovery

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2