Analysis
- max time kernel
150s - max time network
155s - platform
windows11-21h2_x64 - resource
win11-20260513-en - resource tags
arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
08/06/2026, 21:07
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-06-08_60f7a44e20bc63d74aa04e257160d595_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-06-08_60f7a44e20bc63d74aa04e257160d595_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win11-20260513-en
2 signatures
150 seconds
General
- Target 2026-06-08_60f7a44e20bc63d74aa04e257160d595_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
- Size 4.9MB
- Sample260608-zypsbae14v
- SHA256 6bf18e84d6a390b0aceded804f3b8244e668ca36ed622f6c72745dc50670d5e7
- MD5 60f7a44e20bc63d74aa04e257160d595
- SHA1 486a6a2fb76f03fef0a9e142c31bdac568f60620
- SHA512 dd2e2c66e6943a9d0ca1172a549e36a6da96d25b597ac3e5a28b200b55107752aa904e2aeed21cbb0574cd4581b26f1e6a113f315008e2c1271d0fb9516ebb6d
- SSDEEP 98304:PFGd68EFMIM0f8ARXaxa6kR5XbEgEk4BI:PBrFxM0f9RK9c5Yl
- TLSH T18A36F047B89040FAC5AED134896A5222BA707C950F3157D73B51B3F82FB2BE86E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2484 2026-06-08_60f7a44e20bc63d74aa04e257160d595_cobalt-strike_dosia_luca-stealer_quasar-rat.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2484 2026-06-08_60f7a44e20bc63d74aa04e257160d595_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-06-08_60f7a44e20bc63d74aa04e257160d595_cobalt-strike_dosia_luca-stealer_quasar-rat.exe"C:\Users\Admin\AppData\Local\Temp\2026-06-08_60f7a44e20bc63d74aa04e257160d595_cobalt-strike_dosia_luca-stealer_quasar-rat.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2484