Extracted

• • Target

    Packburpsuite21.rar

  • Size

    208.8MB

  • MD5

    7d21c6d05d4cd5deb4e8f0123804a833

  • SHA1

    94d309b8c65cdf88c52d9e6bd3c0085cee33f16d

  • SHA256

    435cef541072c4e67643602b1c93277efaa122246c10f9e1a6d7fadcdedca947

  • SHA512

    5ede8e6bc4d41665620c4824ed1a1c3bdb3127450fa5dea1406a82b7ceb8cb18f5e9081d9ad792e66df912096b54ca0f7f000b4924a1743566285940b46aef5b

  • SSDEEP

    6291456:wfDlqvXnRovMwPG3JAZqKdy/z/PhJlTz6:wfxqpoTPG3JFKdozBJtz6

  Score

  10^/10

  quasarloomisdiscoverypersistencespywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Executes dropped EXE

  • Loads dropped DLL

  • Adds Run key to start application

    persistence

  • Checks installed software on the system

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery

  • Looks up external IP address via web service

    Uses a legitimate IP lookup service to find the infected system's external IP.

  behavioral1