Quasar,QuasarRAT,xRAT | efacb905cbe5

Classifications

Injector Spyware Backdoor Keylogger

Threat Names

Quasar xRAT QuasarRAT AZORult +8

Dynamic Analysis Report

Created on 2021-09-28T10:14:00

efacb905cbe59645ce57ea6ac46d32add5f48278aefd411bf4f53116ca0fb0e0.exe

Windows Exe (x86-32)

Remarks (2/3)

Anti-Sleep Triggered (0x0200000E): The overall sleep time of all monitored processes was truncated from "2 minutes, 45 seconds" to "2 seconds" to reveal dormant functionality.

Auto Reboot Triggered (0x02000004): The operating system was rebooted during the analysis because the sample installed a startup script, task or application for persistence.

Anti-Sleep Triggered (0x0200003A): A task was rescheduled ahead of time to reveal dormant functionality.

Function Logfile

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".

Before

After

Screenshot