Extracted

• • Target

    frivirus.exe

  • Size

    1.8MB

  • MD5

    22b6ce3fb5468a1a3b815fd49cef9e2a

  • SHA1

    eb0e6a30595d33f486a31875ab6987589e62a1cf

  • SHA256

    03168b7fc07d7572179b03b923c22200b259d4e01754e3e0df0118206ac9c2b9

  • SHA512

    e79723c4e0a62dac02f2f2bcbb487527ad053069e3b6065a13822165173823b4d5b326293ebe99a5c58b1409b33e904415c0816a9d4401f4fdd518d452720530

  • SSDEEP

    24576:cl157A4S2eWBRwRR16zhHIPbcNK0KKm77yviUSQaZaOwI55l2S62r9exnd7XrwSZ:cb5t7wR2EgKKm77LrwCB6TFrwM9

  Score

  10^/10

  quasardiscoveryransomwarespywarestealertrojan

  • Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar family

    quasar

  • Quasar payload

  • Drops file in Drivers directory

  • Executes dropped EXE

  • Reads user/profile data of web browsers

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer

  • Drops file in System32 directory

  • Sets desktop wallpaper using registry

    ransomware
  behavioral1