General

  • Target

    9da0fc554b79cb7e6eb8209714a2f49a6e65c37d12945deba5aa8db19a3fc6e2

  • Size

    2.0MB

  • MD5

    7c35f4679f0af25a874454f9faaf1eae

  • SHA1

    55d7736cbf4a85a8c600371e6dde14c244f2cc98

  • SHA256

    9da0fc554b79cb7e6eb8209714a2f49a6e65c37d12945deba5aa8db19a3fc6e2

  • SHA512

    715b65e9368cf3fdee931c8a8ebda89a115ed62e94b680ba96eba25ba1de3194f5b0b37827a0eed4fb5c8580801f1a59a20250b032d1be76710fa80bbe2811a9

  • SSDEEP

    24576:su6J33O0c+JY5UZ+XC0kGso6FaI1IXgM6YmenKKSUlmDaGJTA4Pqa6jUvOkQwKYD:2u0c++OCvkGs9Fap5aLKLkDl+dUvO9Yt

Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables containing common artifacts observed in infostealers 1 IoCs
  • Quasar family
  • Quasar payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 9da0fc554b79cb7e6eb8209714a2f49a6e65c37d12945deba5aa8db19a3fc6e2
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections