Overview

overview

10

Static

static

10

5bd2f81dc7...b0.exe

windows7-x64

10

5bd2f81dc7...b0.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5bd2f81dc74bd7733803f1193cffb5ec379ccb4f7eaebff51a472c3533fb8db0

  • Size

    2.0MB

  • MD5

    a965526659c9619fcaf8b933578b3d5a

  • SHA1

    39952cec5ebd0befc493b387899c6884691934e7

  • SHA256

    5bd2f81dc74bd7733803f1193cffb5ec379ccb4f7eaebff51a472c3533fb8db0

  • SHA512

    743253b90d5ccb7e3c09a0d676e317b6a6debf083b51941826b1f28c3b17d2462e9626827f095956e0ae08e094c7f97f8e08cdfe80778745d2674525a376758a

  • SSDEEP

    24576:su6J33O0c+JY5UZ+XC0kGso6FaI1IXgM6YmenKKSUlmDaGJTA4Pqa6jUvOkQwKYp:2u0c++OCvkGs9Fap5aLKLkDl+dUvO9YH

Score
10/10
quasar

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables containing common artifacts observed in infostealers 1 IoCs
  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5bd2f81dc74bd7733803f1193cffb5ec379ccb4f7eaebff51a472c3533fb8db0
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections