Analysis
-
max time kernel
1462s -
max time network
1503s -
platform
windows10-2004_x64 -
resource
win10v2004-20230703-en -
resource tags
-
submitted
22/08/2023, 10:15
General
-
Target
turingmachine.exe
-
Size
286KB
-
MD5
c81a9adf64819041ac1435fab28004e3
-
SHA1
a126d54caabbdd6456ac1ddd57a4ead629f4f287
-
SHA256
5a1c7a22a6fbe36701b53b49a134ad37ab6194030753824a1bef260862902ac8
-
SHA512
3ec5bc46bd46a06271905614adde9e60dd30d2315eb700d36852c6d2e1207a6218d007a7eb9ef2f0134eae53b1a04305be61e314e0ca426e132e8660e0bdcf58
-
SSDEEP
6144:lGz3mOwb5nxTfSUkAxzi1jZtV6GUvUwibiCcefPgMJjaTbMFfCNB53C:2YxrOKHibiCce3jaU6B53C
Score
10/10
Malware Config
Extracted
Family
quasar
Attributes
-
reconnect_delay
5000
Signatures
-
Quasar RAT
Quasar is an open source Remote Access Tool.
-
Quasar payload 1 IoCs
Processes
-
C:\Users\Admin\AppData\Local\Temp\turingmachine.exe"C:\Users\Admin\AppData\Local\Temp\turingmachine.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
312KB
-
Filesize
7.7MB
-
Filesize
5.6MB
-
Filesize
584KB
-
Filesize
64KB
-
Filesize
7.7MB