General

  • Target

    QuasarModded.scr

  • Size

    1.2MB

  • MD5

    a4804946374d70da63b45d48c0de6188

  • SHA1

    a00c5b21387aa3b2fa9eafd8bd3d0159de32454f

  • SHA256

    e5f8616d5ed2e6e1538b238c2ef7d13ee680406899fa14cae2ad54bede356d4a

  • SHA512

    d3e9bff12b39e2d4602e947be84606ffbd7af2bc9b0785721d9caf679163749892b7fa2cc33c76def45b275ce2971fef1a27d0369f857c42dca2dfd666631f5c

  • SSDEEP

    24576:u2G/nvxW3WieCaZtNvoYU367xprsfVwkR4QuYN0wnxvjd:ubA3jGA+ruVwkz6wnxvx

Score
10/10

Malware Config

Signatures

  • DCRat payload 1 IoCs

    Detects payload of DCRat, commonly dropped by NSIS installers.

  • Dcrat family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • QuasarModded.scr
    .exe windows:5 windows x86 arch:x86

    fcf1390e9ce472c7270447fc5c61a0c1


    Headers

    Imports

    Sections