Extracted

• • Target

    SeronTest.exe

  • Size

    3.1MB

  • MD5

    40d84af5b3499ad8d4485b8839db2f1e

  • SHA1

    beba1013f026a44d45e15aaefb947cc40132d38d

  • SHA256

    35d51e82e11a00d9bad3dab068867af8ea3b9859aee47ffd0d1e92a06afd6859

  • SHA512

    4b7af63b4bbfd65584990bf14b7cf7088c7359dd5ff3d5d14c92d70c024e7c9ff8ecc9752cf830a2740fd2d30b88581083d81be6734492a29fcc6e211d1af07c

  • SSDEEP

    49152:oee9cfJdeuEJD4iVUdzb7BGpNG+26vllqJ44hTorj+XyJ2pFnRcEHyaNkfc/hS4m:JgcRIjJDDVozb7BPCbGyrvJenyLyMmV

  Score

  10^/10

  quasarserondiscoveryexecutionspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2