Analysis
- max time kernel
148s - max time network
152s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260629-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
06/07/2026, 16:26
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-06_abf50b8fb81fb66acbae763c3e070876_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-06_abf50b8fb81fb66acbae763c3e070876_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
General
- Target 2026-07-06_abf50b8fb81fb66acbae763c3e070876_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
- Size 4.9MB
- Sample260706-txp4sshw81
- SHA256 8f72dbb41e4a2ba9f2341c321204d27b74de17ef77fe489878ca33fe20a298c1
- MD5 abf50b8fb81fb66acbae763c3e070876
- SHA1 f44f8d0dd0829fae8734950bbfdfb9aad625d5f8
- SHA512 9eae34d535f1c1dc6dc0f69dac4816300f2eeb2c26923c734573f75c94928d755f248a82232a490ff1e403b59bc296861a43961857721d4319e201efb66310f6
- SSDEEP 98304:CJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgClw:CeNLNek1VpqUesOYiqfxrstHv
- TLSH T13436F047B89000FAD5AAD2348A665662BB713CA50F2157D33B10B7F82F73BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 2200 2026-07-06_abf50b8fb81fb66acbae763c3e070876_cobalt-strike_dosia_luca-stealer_quasar-rat.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 2200 2026-07-06_abf50b8fb81fb66acbae763c3e070876_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-07-06_abf50b8fb81fb66acbae763c3e070876_cobalt-strike_dosia_luca-stealer_quasar-rat.exe"C:\Users\Admin\AppData\Local\Temp\2026-07-06_abf50b8fb81fb66acbae763c3e070876_cobalt-strike_dosia_luca-stealer_quasar-rat.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:2200