General
- Target 2026-08-20_aec4c29689bfa6c2d844b5c3f270d96e_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.5MB
- Sample260820-3kgfkack9t
- SHA256 cdbe82ca8f36f17a2a4593d255addb391f4501db99afa376492e83837f62c144
- MD5 aec4c29689bfa6c2d844b5c3f270d96e
- SHA1 1731b6ad13d9715f6932301984c18d382ef2612f
- SHA512 913cae2c03ec6db985f617067bfeb9288595ba1853b4403195b64abe8655f130e4bbdd27f85157b51d556cadba6401b3779a66f4ffae378de602de6af7878303
- SSDEEP 98304:QJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCm:QeNLNek1VpqUesOYiqfxrstHv
- TLSH T1AA26F047B89000FAD5AAD2348A665662BB713CA50F3157D33B10B7F82F72BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_aec4c29689bfa6c2d844b5c3f270d96e_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
117.50.195.220
Attributes
-
port
8001
-
salt
123admiN@
-
type
tcp
-
vkey
123admiN@
Targets
-
- Target 2026-08-20_aec4c29689bfa6c2d844b5c3f270d96e_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.5MB
- SHA256 cdbe82ca8f36f17a2a4593d255addb391f4501db99afa376492e83837f62c144
- MD5 aec4c29689bfa6c2d844b5c3f270d96e
- SHA1 1731b6ad13d9715f6932301984c18d382ef2612f
- SHA512 913cae2c03ec6db985f617067bfeb9288595ba1853b4403195b64abe8655f130e4bbdd27f85157b51d556cadba6401b3779a66f4ffae378de602de6af7878303
- SSDEEP 98304:QJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCm:QeNLNek1VpqUesOYiqfxrstHv
- TLSH T1AA26F047B89000FAD5AAD2348A665662BB713CA50F3157D33B10B7F82F72BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects VSHELL Backdoor