Overview

overview

10

Static

static

10

7908964373...0a.exe

windows7-x64

10

7908964373...0a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    79089643736164d0100b69bdc309b4aa69f87f3c915bb80bed31f122e77c760a

  • Size

    2.0MB

  • MD5

    b1f94dcb56edf7117429cfb1d64b1ded

  • SHA1

    a06a8280e6b605fbb2ca278df1be1be4e979a8e7

  • SHA256

    79089643736164d0100b69bdc309b4aa69f87f3c915bb80bed31f122e77c760a

  • SHA512

    47ffbcc807df8ab2b827bcebc23cacbb3f2e831790d3c37de2bffcedcad0c88513c97973ee96941ccd96c1bc0bd5ae4fef65be7d5e3306c721a692a91991df45

  • SSDEEP

    24576:su6J33O0c+JY5UZ+XC0kGso6FaI1IXgM6YmenKKSUlmDaGJTA4Pqa6jUvOkQwKYt:2u0c++OCvkGs9Fap5aLKLkDl+dUvO9Yn

Score
10/10
quasar

Malware Config

Signatures

  • Detects Windows executables referencing non-Windows User-Agents 1 IoCs
  • Detects executables containing common artifacts observed in infostealers 1 IoCs
  • Quasar family
    quasar
  • Quasar payload 1 IoCs
  • AutoIT Executable 1 IoCs

    AutoIT scripts compiled to PE executables.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 79089643736164d0100b69bdc309b4aa69f87f3c915bb80bed31f122e77c760a
    .exe windows:5 windows x86 arch:x86

    eb97e4fc5518ac300a92a11673825e0b


    Headers

    Imports

    Sections