Extracted

• • Target

    c196286c4abe88a9242b9f619c261571a658244e4e77272e33dd2527606087a0.exe

  • Size

    551B

  • MD5

    2ffd76a01df2c01b424688a63c8f769e

  • SHA1

    2cabb8e5854db69ae9d836deea7c554df6404d10

  • SHA256

    c196286c4abe88a9242b9f619c261571a658244e4e77272e33dd2527606087a0

  • SHA512

    6ce5c376b98960ce6c318c7f958f5b042b15282f12f53e899449330354273d49368c32fa672e2199d4eeb8e13bfb7dcdf0d90c314a8c9559534f4c1fb500883e

  Score

  10^/10

  quasar2026discoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Downloads MZ/PE file

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Loads dropped DLL

  • Suspicious use of SetThreadContext

  behavioral1behavioral2