General

  • Target

    OperaSetup.exe

  • Size

    6.1MB

  • MD5

    00a4ee18252cfabbf6735ce1f49e77c7

  • SHA1

    a8aafe58a2a6cf454ce0582354b7212a87703b96

  • SHA256

    eb8a525a1775421921d9adc2da4d5f45d7e15c0bad290df07b882925f999edb1

  • SHA512

    cb0458b101099f3c4bc810297b001887b3619db0354be5e9e93bbdb2e3a0dad31954257e0802082e1e25dbe7609d4d9e02e6f2b99b16ec9b01572b09ca4f1d13

  • SSDEEP

    98304:hGh5ziNlRUaub+MPDrc/c+NmXnKyFrsqCZHj92AYawl1WPOl6NVLkJ0xTX+H:h3NlqaubXgUCqC1BjxaH

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    3000

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • OperaSetup.exe
    .exe windows x86

    Password: ms

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections