Extracted

• • Target

    Seron_protected.exe

  • Size

    2.3MB

  • MD5

    a1e7539d32cd463c86540e00607e274b

  • SHA1

    537b182c080ddd6fa8e89b31d67297abf7aef554

  • SHA256

    828b9961731797b0a487f095d9980d3771599eb54feab35d1e856b925558e61a

  • SHA512

    33c8ff00732e04a360c57aef401467f54a649563c5820c81c19b5de1607102bd9c29c65ca4f8c914885a0031b0c415339efa01122fbda58e17d8ff632d48b567

  • SSDEEP

    49152:M55We0VQ+028J5gyUjjp5bCt7S275L6MP/J2H76gYSt98H9Y08ChNB/n:M55We0VCN6jjp5bC5Ft6MX4H76XStCdz

  Score

  10^/10

  quasarserondiscoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Executes dropped EXE

  • Suspicious use of NtSetInformationThreadHideFromDebugger

  behavioral1behavioral2