General

  • Target

    $ONI$-Stub.exe

  • Size

    3.8MB

  • MD5

    9bc07ccdcad9342cb5bc1ba486e79326

  • SHA1

    f41e35ff0abf574fef6b2c54c81aa931f1a6727b

  • SHA256

    caf2cb3d9a22d74ec73ce89ced81e2218115e5495a72517de6fc118cc3088cfc

  • SHA512

    df9794cc5d1ecccab5b98f00828bc763e72acb9129010bc8370f51c1917620750ebef6f765d78f3d37d5c16a8320fee0b61eca3886436b497182bd9ecef30820

  • SSDEEP

    49152:kPrLTGZJwSBkNBwU47g9sntFJxZTOCdw9Wco/OHeoDCtTHHB72eh2NT:kPrLTGZRH/tFJ/TOCdw3oL

Score
10/10

Malware Config

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • $ONI$-Stub.exe
    .exe windows:4 windows x86 arch:x86

    9dc12590a8415085e474837eeac1b8c4


    Headers

    Imports

    Sections