Extracted

• • Target

    Client-built.exe

  • Size

    3.1MB

  • MD5

    2ec8bb66e6d31a3eed3ab81af9c86633

  • SHA1

    51775afa0bda90e7fb956897a0649302a6e3e862

  • SHA256

    8c693ee26028976b6f9377f1a95e27cb821120e2ab6b5ffb885782f66eb59699

  • SHA512

    a9b2fab76f360e7cdde888b205d823c062e9d883dfe97a066590a00e43ab2d6e8853223ff44e572bc221da03bd8f9bf2c419851783322172618f56a6e52c6d0a

  • SSDEEP

    49152:rvTlL26AaNeWgPhlmVqvMQ7XSKsZxNESEZk/i6LoGdwETHHB72eh2NT:rvJL26AaNeWgPhlmVqkQ7XSK+xMkg

  Score

  10^/10

  quasaroffice04discoveryspywarestealertrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Executes dropped EXE

  • Reads WinSCP keys stored on the system

    Tries to access WinSCP stored sessions.

    spywarestealer

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  behavioral1