Overview

overview

10

Static

static

10

2024-02-24...at.exe

windows7-x64

10

2024-02-24...at.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-02-24_d094a0ccfe888fdda7e135fa125daab3_icedid_xrat

  • Size

    4.8MB

  • MD5

    d094a0ccfe888fdda7e135fa125daab3

  • SHA1

    5e4089d4256e163d584a4cde071fb17f919695cc

  • SHA256

    4129841f8408648464fa99b0a1d85924168461e7cc80c5a3c23ecb49075a3037

  • SHA512

    bab599f7ae76ccd4e0f67ab5e7dbcbc5f1fb905585b59c093f40458ba8167ee2812a5a84971cf76361213462d8aefc35bf062128a6095733f835bd44b1d09858

  • SSDEEP

    98304:1PzWZb4oUvH22SsaNYfdPBldt6+dBcjHk/bzQIbzZ7IbzZY:q6Y7jsbzbqK

Score
10/10
quasar

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects binaries (Windows and macOS) referencing many web browsers. Observed in information stealers. 1 IoCs
  • Detects executables containing common artifacts observed in infostealers 1 IoCs
  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • UPX dump on OEP (original entry point) 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-02-24_d094a0ccfe888fdda7e135fa125daab3_icedid_xrat
    .exe windows:4 windows x86 arch:x86

    bd8529b16931d3bdb67555efb8d9513d


    Headers

    Imports

    Sections