General

  • Target

    560740x00000000004000000x.dmp

  • Size

    3.1MB

  • MD5

    274601916bec8cf112c9c459c6a22f18

  • SHA1

    93923338423dd493cfb5eed5cadfc96734b9b63e

  • SHA256

    d65a1b135ee32d338805d3ab5a50785200b7fce8b4ab0566e718996686342d9d

  • SHA512

    ebb87ff8f2e34bacc5756977237a8fe3f6776537e3b94e67e33fa758a04bcea1f44a6ecac340e688b02d01c00e8df3bac2e6f875f908584b862a8098c9454629

  • SSDEEP

    49152:3vbI22SsaNYfdPBldt698dBcjHO2wcuOoGdHqTHHB72eh2NT:3vk22SsaNYfdPBldt6+dBcjHO5cn

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    3000

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 560740x00000000004000000x.dmp
    .exe windows x86


    Headers

    Sections