Extracted

• • Target
    UHQ Client v2/UHQ-Client-v2-2.1.3.exe
  • Size 102.5MB
  • SHA256 d58289a3d859150f5f315cc5c8535f7275578913064634a0b32580c8f44d9085
  • MD5 07896dbe66942fc44454ef6096aff2ed
  • SHA1 36bf7e3b8e5f84244c79a43c3acf081c0aab3970
  • SHA512 00084a284fcbcb7ffd9ecc62e222f95679cbfca633bfc4a99a2a535e847372ff468f3318cbfa1fab3123e104ab355b95e2f986a99459e2299c03ec85a762c80e
  • SSDEEP 3145728:xUK9s4MBcru22RWzhmoMW6ojmqxHhu/mnaEP2JM7:xkBWVwo6o2Jo
  • TLSH
    T10A383328D160347AD43B4438FEFA3111D30DE9BD16A3AC6917CDEBF132A59C72618A9D
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  discoveryquasarspywaretrojan

  • Family: Quasar RAT

    Quasar is an open source Remote Access Tool.

    trojanspywarequasar

  • Quasar payload

  • Loads dropped DLL

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1behavioral2
• • Target
    $PLUGINSDIR/StdUtils.dll
  • Size 100KB
  • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
  • MD5 c6a6e03f77c313b267498515488c5740
  • SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
  • SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
  • SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
  • TLSH
    T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral3behavioral4
• • Target
    $PLUGINSDIR/System.dll
  • Size 12KB
  • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
  • MD5 0d7ad4f45dc6f5aa87f606d0331c6901
  • SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
  • SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
  • SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
  • TLSH
    T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  3^/10

  discovery
  behavioral5behavioral6
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/__pycache__/pyi_rth_nltk.cpython-314.pyc
  • Size 506B
  • SHA256 7eb1776671e9a4d5aca9ce8b6b80d16f4c4b4172b704b7d8a599342832717a64
  • MD5 aa5ab7b3f2bd738cc7bf8f999c044ed8
  • SHA1 1ec8918867996a7c0c3e1d7f430dc37d7ab362d7
  • SHA512 73f3d67fd6237dde36dca950594d61446eff4929e8a11da0be97fca570298ad314d4c7d9c79a23104e80162fffb88aa5e0f9939edfe4a625935a9e8131f31a10
  • TLSH
    T1D6F0F1F2B5C502AEFC0E1A3BFDE782216870ECE8E5431181F300E23A5DCD102D152346
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral7behavioral8
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/__pycache__/pyi_rth_osgeo.cpython-314.pyc
  • Size 1KB
  • SHA256 a6369ffc8f2b987c448b49d316db62826e31e990d2ade8cb3a948dcacddf5dfd
  • MD5 2e9160512b8df9eec5f089b2a64cfc8c
  • SHA1 564a59ea01197e031c378af13815e4a052e754be
  • SHA512 43437daa4ff7499837f9aadb216f4b55fa3ea8fb18b5ddfbe17cd72a20aaf1eaf6951b8341b619a30870db2e2f96b0f7cb9d2ab4d20a2cf857a6684a459bb82f
  • TLSH
    T1F831A0B05A4C85ACCA9D0A3ABEF94CD4B37088D46DD19711F764B53918DF2008978205
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral10behavioral9
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/__pycache__/pyi_rth_pygraphviz.cpython-314.pyc
  • Size 1KB
  • SHA256 46d3a25ab198a669e5760da1b460667b7e5e479c45f49fd39325b67177bc7cea
  • MD5 8fe193bf27b2083f36e8b5a5513d05fd
  • SHA1 8738a0fe22de5177ad5e40c85ee608fa4e3dc282
  • SHA512 eb54da346fadef502e30b3150e4ed9910212529fa191304df76e3c820cbc7165ae3ddc4bef0f2b3eea322436eea5bde2a8b3e7c9bf752a78a509217783de84a2
  • TLSH
    T1C51167E9D588C2FFFA0A623478CFD755F141D493D413D68AEB45641CFD851114551342
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral11behavioral12
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/__pycache__/pyi_rth_pyproj.cpython-314.pyc
  • Size 817B
  • SHA256 dff6c5db83534517c5d0dc36b97def1d2be1da1bef74676064ead9fb6bd37746
  • MD5 26d8c0e0b0e0e0ff8d74cf9e7ec9c464
  • SHA1 340b50e8eabfe4b82c9322cee2fdb8a34a7bffd1
  • SHA512 d0cc072954b3e98ecdcd59f46ae2e96e959d01ebdc8bb3b8e8b7b250aaea6527334705fd6759cd87367177682596cfa2462fd272f3720ac737220b01c595ba90
  • TLSH
    T12C01DDB1F60C959DCE9E4A39BEE691AA7360C850ADE16261F360757928DF101C864310
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral13behavioral14
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/__pycache__/pyi_rth_pyqtgraph_multiprocess.cpython-314.pyc
  • Size 1KB
  • SHA256 15689669dde90eec36f580b6ff332654cad2e4bfd6c0d7a2e47a99af772e1b2f
  • MD5 289f4f1b7607559c1b17a092cd363561
  • SHA1 f16ac25281e8cceb06860dbdfbeaf34a482d8109
  • SHA512 d66b57c91eafce26e5ebbd224932aed7e27b3075efc428dde99fbdace02f57c20f13bbf4fc5142f6616da9807dd7f12af33fe899e10746db8282a3f93e9717d6
  • TLSH
    T1E541A479C7602297F6E8893D306B88B21BD1C205A5A2D11AFA5D8E343C86715A13022E
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral15behavioral16
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/__pycache__/pyi_rth_pythoncom.cpython-314.pyc
  • Size 642B
  • SHA256 9382c0c33f87be14774195fc8a04b0ec7299e826f6743dad7c524560a98b4ce8
  • MD5 58b0fb45309787717eb2e45852bfb657
  • SHA1 7e475eb18e426866b1e6138d0b6483f61499144a
  • SHA512 acf2f2a7941debacd084f922780e3562bd474898268fe2a2d31006c4cf14ce88bedd167e6abf6cc0d3765abaa297e833b914fba70deafd75d023604a004e97dd
  • TLSH
    T1AEF09EF4D740D36AD909073AE9C7D10467E4B8ED988A9110F750482EED5D2218660655
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral17behavioral18
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/__pycache__/pyi_rth_pywintypes.cpython-314.pyc
  • Size 643B
  • SHA256 4e196931d046ceb4be08ea5821269fde6642a0b75c91a2551477d0d6867a5a1e
  • MD5 0ff0562a87f48233a75cd4d0842972ab
  • SHA1 8630c9ccc0794ffc1f7414aef7170ec97f314a93
  • SHA512 c0a0ceb11c31ddf4606ecd07fb7af9ce38d796fef0774bd14b18e051394751236919f1788a2d1dfe67fb0e318603c0f524247f4c064660fbccf92cace85194cc
  • TLSH
    T1F7F00EF0E740C366D8090336E8C7D1006BE4BCEE48CA9010B600482EFC5D2218660615
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral19behavioral20
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/__pycache__/pyi_rth_tensorflow.cpython-314.pyc
  • Size 890B
  • SHA256 c27d87b944079850fd3faf42bb67d6086463ce1cc23ec28a1d4fe13958b2e53a
  • MD5 db6ba908c9d3337718a7146e87dce28b
  • SHA1 c651b37b053971deccc9e95d78fc2839158ed6bb
  • SHA512 1619bb0744d9a2628d56fe9e65f40c4a2c3e347a99808072e58249c2a42b771c375297bd41be71c4876211e00eb4f2ad50d8eff494f8bd24362959a2a3d33984
  • TLSH
    T1AC1146D2B8401303C9294638E5D35317A56A4D73F21053C3B73DA27D2CE54C34563B04
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral21behavioral22
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/__pycache__/pyi_rth_traitlets.cpython-314.pyc
  • Size 496B
  • SHA256 a1e318368a29ed6d4f329e43f23496e987a65b9190b1bf047a01d180c946f933
  • MD5 6cd2b36b95624ee5e993d957d6aa6950
  • SHA1 b89bdf293b5860ef6266a677ff45b3fb16b8a8cd
  • SHA512 49ede0f00d1359838640ba7e0690883efcbb3cadff27ecfd4d193add5dfa41c2e18200958777bc4dada3f7487f228b00daadec2b83bf65d64c87c351091040a5
  • TLSH
    T1D4F0DCCBF3CA1309DC56A73D9157410C59A1A8A8D1564943BF18577B684E600C520301
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral23behavioral24
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/__pycache__/pyi_rth_usb.cpython-314.pyc
  • Size 2KB
  • SHA256 4e585053050914486188c64b191fe49797f50a77df81894d6838fa1251206108
  • MD5 5dd8352305576004a35bd90de2824abe
  • SHA1 a64dc29ef65f81c3b06a2f5f2f4e3cb9de675cd9
  • SHA512 2d91e7cc20bd85389467f48c4edc190b11f413a92db9dad743a6e99839f2792c79c2fbae9a72e79e57322626c21656fe4b2d2b25ba1cdaa3775c2145e98eda4a
  • TLSH
    T17151C5BE83D4C833FEDA823AD5C78494F33AC54AE5734303B9099D755AC8B198A9030E
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral25behavioral26
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/pyi_rth_cryptography_openssl.py
  • Size 755B
  • SHA256 8e7cc4924d4c673164f4c7f77c62af6ab822d76ec94da13641d4ab1026e20f1e
  • MD5 e3431877250a23ca8f5034de292d3216
  • SHA1 edbd3f717fabe403f35d37a23daf41820fcb0a7d
  • SHA512 2d32790341b749cbd89700f081e399182e1b7e1c503ace0177ead5c6701093e6f8878e2c667d123b113483e1809f8fd5f6ad1fe4d5d912b58fae073ca239ba6d
  • TLSH
    T14601A2F0ECF13B132989E2CCFF4A42FDDF85AAD662183461205C49D97229D3641FC440
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral27behavioral28
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/pyi_rth_enchant.py
  • Size 903B
  • SHA256 3eb2aaa39c0ee524528869d9517c55505b3e1d65cb507a79932f4704ef97b6da
  • MD5 bc7b5ab5692112f7841f75a2f1714a5f
  • SHA1 82b1afa25fd5a9ca317ae3ed7ce8d746e1671e42
  • SHA512 5b395dd3c2e668f6c63b6ebe614f867e10cac2706cb9c94c8f02ef93a80286575b27b05c1b13f6258f6011df2a114ad72bdcd70824846e519eb805fd42261875
  • TLSH
    T10711BDE1EE4461A39AA5CBC46FCB65F9F72E645B79962424609C05B8B31858504CCC60
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral29behavioral30
• • Target
    resources/runtime/Lib/site-packages/_pyinstaller_hooks_contrib/rthooks/pyi_rth_ffpyplayer.py
  • Size 879B
  • SHA256 a8a3f06021509a604a8ad2ab6d0d01153adaddb6d59865c1f10c1cc5792783a6
  • MD5 bb882d08fce5a3e52a935f93df7eadf7
  • SHA1 194b4e1c85472ac732f752f2567e26f07c78acdd
  • SHA512 6a607413e3e862d3f38db158f89567f533481d2b1d3024408c4cd47a49354b4f58474441e537d3a74b317e06dc9060040a99e8450a2b693b0fe020ba3664083f
  • TLSH
    T15511F8862E8077B19A92CDF04B4F41ACDA2C209EE25332B12C49A6FD321849102FCC60
  • MD5 SHA1 SHA512 TLSH

  Score

  3^/10

  execution
  behavioral31behavioral32