Analysis
- max time kernel
150s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
04/08/2026, 02:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-03_4f29f3a45963d5068d2346cd2433b7a3_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-08-03_4f29f3a45963d5068d2346cd2433b7a3_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target 2026-08-03_4f29f3a45963d5068d2346cd2433b7a3_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
- Size 4.5MB
- Sample260804-de7ywsca32
- SHA256 dcbec41c96b8cfe18380c7e1b0e1e3cf4f554c54e85bf0448c4ed8eacbf4d634
- MD5 4f29f3a45963d5068d2346cd2433b7a3
- SHA1 2956bad078d073013ca92d7019b1c2c3c4863e2d
- SHA512 7163c35b627c19bf91ce570f59c2dbf294fba1be2888ba52be891ecbe8a1812d4eff395f4be424d85448267bec911ca25c493e4f606c1b31ae4a1583363e3cb1
- SSDEEP 98304:8FGd68EFMIM0f8ARXaxa6kR5XbEgEk4B2:8BrFxM0f9RK9c5Yl
- TLSH T1D226F047B89040FAC5AED134896A5222BA707C950F3157D73B51B3F82FB2BE86E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Suspicious behavior: EnumeratesProcesses 1 IoCs
pid Process 5608 2026-08-03_4f29f3a45963d5068d2346cd2433b7a3_cobalt-strike_dosia_luca-stealer_quasar-rat.exe - Suspicious use of AdjustPrivilegeToken 1 IoCs
description pid Process Token: SeDebugPrivilege 5608 2026-08-03_4f29f3a45963d5068d2346cd2433b7a3_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\2026-08-03_4f29f3a45963d5068d2346cd2433b7a3_cobalt-strike_dosia_luca-stealer_quasar-rat.exe"C:\Users\Admin\AppData\Local\Temp\2026-08-03_4f29f3a45963d5068d2346cd2433b7a3_cobalt-strike_dosia_luca-stealer_quasar-rat.exe"1⤵
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5608