General

  • Target

    ca24c1798b8b13524399d59b929c0e11.bin

  • Size

    3.1MB

  • MD5

    ca24c1798b8b13524399d59b929c0e11

  • SHA1

    28fe2d1e2018341659a8b5193936583de834bab2

  • SHA256

    21d3317db687105c59c19b0371f692e73e45007a5a5888583955ec5a7581c566

  • SHA512

    8d38274c996f51a3a22c4b719ddac1b800cb6cd2b5ce4a00cfddb3909b4f4413f4907f5c5b91f93bd55ca84c27058f14b475ddb92b522f6fbc736ef453ca7625

  • SSDEEP

    49152:vvDk32hKa9wJdPjlLPyclvwrtjWZsi+vERTHHB72eh2NT:vvY32hKa9wJdPjlLPy6vwrtjWZB

Score
10/10

Malware Config

Extracted

Family

quasar

Attributes
  • reconnect_delay

    5000

Signatures

  • Quasar family
  • Quasar payload 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ca24c1798b8b13524399d59b929c0e11.bin
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections