Extracted

• • Target

    b93b5cc63a5ee1981c074abb7921a4bdb147197dc85dd1af42305066736d8574.exe

  • Size

    3.4MB

  • MD5

    61a23a5c02f19dda41b5f63b48784a96

  • SHA1

    def21ab5c10bf3b4e5a5d2b2abb5d00b8e2dea18

  • SHA256

    b93b5cc63a5ee1981c074abb7921a4bdb147197dc85dd1af42305066736d8574

  • SHA512

    2e210707c58c71aa20a6ddffd95b83fd5c61e039a4201a807409ad1570c4650bb6549e85bb161631ccae26e310799379864e1b3c090145d103f1a6bdc9573cf4

  • SSDEEP

    49152:XvulL26AaNeWgPhlmVqvMQ7XSKeK8FEzUkk/bZLoGd5YTHHB72eh2NT:XveL26AaNeWgPhlmVqkQ7XSKH8tp

  Score

  10^/10

  quasarkasperskydiscoveryspywaretrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2