Extracted

• • Target

    Authenticator.exe

  • Size

    375KB

  • MD5

    85b43fd8aa9d8b09b8613f2fa47c6bb0

  • SHA1

    3729c0739c24b7ed9fda30684173a869c7398e80

  • SHA256

    6eea566794504979f9fa4d75285751f49afde178ad8a0cdfb81fceec9ebb2eb9

  • SHA512

    2898dc0c44a6543136281cf0bbdc03c3cc958098366773fc31ab047c2819e9df3d2b5596ded0d9a2811d915d4ced0404494dfa3381572c56dda9bf2772706ef2

  • SSDEEP

    6144:YbqQ4i1FFiEKZVSQZzs5jQKbgQ203StbjjSQkzaozVVqH:CpliPScgCy73StbjjSQkVzV0H

  Score

  10^/10

  quasarauthenticatordiscoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1behavioral2