Extracted

• • Target

    SeronTest.exe

  • Size

    3.1MB

  • MD5

    48acd4292ff6945cfc14c1c9fd9a764e

  • SHA1

    5e4c15dfd00432fcb731ac0fa4190cda1d314e0e

  • SHA256

    c75b5b56db4572b061ba8a096e58e43a9cd4d47203ceb2152ae03646a7cb8694

  • SHA512

    e3a6b1c58dcf80d40f25dc434b9260ef1e35e904b1592e8b21dcad34cb8ffe8362b6243c89b78721f2d8c17e0e69cebd2272d47e2fcb05ffaa0aa5b00516f845

  • SSDEEP

    98304:J7NGe5a2R/OYslkwkzycLcAI6jfdZhETdC:JNTg2RtsllkecYANjffhETg

  Score

  10^/10

  quasarserondiscoveryexecutionspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Command and Scripting Interpreter: PowerShell

    Using powershell.exe command.

    execution

  • Suspicious use of SetThreadContext

  behavioral1behavioral2