General

  • Target

    1912740x00000000004000000.dmp

  • Size

    3.1MB

  • MD5

    2d9edb6984bbae228680fdb24ff09f3e

  • SHA1

    6b3d39b4304fa37c6b31c1b59ce6be10c119eddc

  • SHA256

    b2446d9bc1c74e2c69b52c617ec338f0fcb69f3076231b429741aaed798219f6

  • SHA512

    ce9751a3d9157dfd0cd962180c4ff6f6acb09e989469869cba1fdd384d3c07c2154c334abce351a7089861abf3813774b0400727d6da4cac202a56d47dc81b32

  • SSDEEP

    49152:HvvI22SsaNYfdPBldt698dBcjHQeRJ6ZbR3LoGdGTHHB72eh2NT:Hvg22SsaNYfdPBldt6+dBcjHQeRJ6b

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    3000

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1912740x00000000004000000.dmp
    .exe windows x86


    Headers

    Sections