General

  • Target

    3c09914d1be33c74bd5aca8378266a1304f3de4d913f9aa20da4d9d5fa92e136

  • Size

    2.0MB

  • MD5

    773c9514739f9416a4f90606ac02d05c

  • SHA1

    304b07a8a2c2337113bc856701b686bf415f6892

  • SHA256

    3c09914d1be33c74bd5aca8378266a1304f3de4d913f9aa20da4d9d5fa92e136

  • SHA512

    bf02ba9ef4d72aee202b46200d1975a61429521fac782f03790e61277903c1c36123629cf8fb2fa33d138cda1f028851e269fabef1bccae1471c0862cab8514d

  • SSDEEP

    24576:su6J33O0c+JY5UZ+XC0kGso6FaI1IXgM6YmenKKSUlmDaGJTA4Pqa6jUvOkQwKYh:2u0c++OCvkGs9Fap5aLKLkDl+dUvO9Yf

Score
10/10

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables containing common artifacts observed in infostealers 1 IoCs
  • Quasar family
  • Quasar payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3c09914d1be33c74bd5aca8378266a1304f3de4d913f9aa20da4d9d5fa92e136
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections