General

  • Target

    4d76ac906021bbc02781841d340f03eaae289d58ce4ed1457e5b539717afb30b

  • Size

    2.0MB

  • MD5

    5c0df4a7294cacdab88a72ffa4ba72e3

  • SHA1

    f9f097e6976cf0d6376a2fcad99db5355dcffa18

  • SHA256

    4d76ac906021bbc02781841d340f03eaae289d58ce4ed1457e5b539717afb30b

  • SHA512

    9b07a660d1037d444f6e370bbe481a33dcc572aeb0388fd8a6bb3403335a1ab9e9d40d5decfef9102c809115153276721e25ceb2c8aa736f406dc8fd32cbdeab

  • SSDEEP

    24576:su6J33O0c+JY5UZ+XC0kGso6FaI1IXgM6YmenKKSUlmDaGJTA4Pqa6jUvOkQwKYW:2u0c++OCvkGs9Fap5aLKLkDl+dUvO9YQ

Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables containing common artifacts observed in infostealers 1 IoCs
  • Quasar family
  • Quasar payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4d76ac906021bbc02781841d340f03eaae289d58ce4ed1457e5b539717afb30b
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections