Overview

overview

10

Static

static

10

c99601e44a...8c.exe

windows7-x64

10

c99601e44a...8c.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c99601e44aee3254aa24da8df64c42d6c36462992e0a936e494188f9adaba48c

  • Size

    2.0MB

  • MD5

    da833e33a67c144eae7850b898192f1e

  • SHA1

    c8e713b603d22abd2de7842cb155104cddd50bbf

  • SHA256

    c99601e44aee3254aa24da8df64c42d6c36462992e0a936e494188f9adaba48c

  • SHA512

    d0c9e6f7e991acac5f66636fd4c47687da0de398b64d4b20e000ad22fb07c5c3b4e97ec5a6940f7c3f60f7219084e0b7f0934ebe753bbc5bf80b6a80021995aa

  • SSDEEP

    24576:su6J33O0c+JY5UZ+XC0kGso6FaI1IXgM6YmenKKSUlmDaGJTA4Pqa6jUvOkQwKYN:2u0c++OCvkGs9Fap5aLKLkDl+dUvO9Y7

Score
10/10
quasar

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables containing common artifacts observed in infostealers 1 IoCs
  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c99601e44aee3254aa24da8df64c42d6c36462992e0a936e494188f9adaba48c
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections