Extracted

• • Target

    https://github.com/Pearlism/pearlism.github.io

  Score

  10^/10

  quasaroffice04defense_evasiondiscoverypersistenceprivilege_escalationpyinstallerspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Sets service image path in registry

    persistence

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  • Indicator Removal: File Deletion

    Adversaries may delete files left behind by the actions of their intrusion activity.

    defense_evasion
  behavioral1