Extracted

• • Target

    5ab24c4a8d7dfdae95475a5252b0fc94561bbf18af68a84a81662050af2c6c95.exe

  • Size

    3.1MB

  • MD5

    3d5f1d38a92807e7de7d98838e05c7e8

  • SHA1

    38382972e6317a6e7010a8d48041e0960188fc48

  • SHA256

    5ab24c4a8d7dfdae95475a5252b0fc94561bbf18af68a84a81662050af2c6c95

  • SHA512

    35266e8c23536a0328e775ef879aac5683688994ada6eb9f91d4cdffdae71ff3a687bcb43deaf792c93b4735be2334b1fa6629a5f500645815cb32273dccaac0

  • SSDEEP

    49152:DvilL26AaNeWgPhlmVqvMQ7XSKnIRJ6ibR3LoGdWhNTHHB72eh2NTk:DvaL26AaNeWgPhlmVqkQ7XSKnIRJ6cY7

  Score

  10^/10

  quasartriagediscoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2