General
- Target 2026-08-20_55547650bf43e9705b9c08c685892c1f_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- Sample260820-hz45yssapa
- SHA256 8f72fb94309c3c0819bf2643b602b34942dbaea7d2e0761756025ca21bf082d3
- MD5 55547650bf43e9705b9c08c685892c1f
- SHA1 236a054145b7b810cbec3af318bd7b76acc7d54f
- SHA512 7c315f723fe4aacf7c1dfc61789d37b92576f2e4210c9912c73955411439cc6dea541bf33145f850b4a34e70109671e92222c204a8725cb2511616f89f2df00e
- SSDEEP 98304:CJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCX5:CeNLNek1VpqUesOYiqfxrstHvX
- TLSH T16C36F047B89000FAD1AAD2348A665662BB717CA50F2157D33B10B7F82F73BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-20_55547650bf43e9705b9c08c685892c1f_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
206.238.123.117
Attributes
-
port
80
-
salt
BlankRXZZzcxa!@##@!
-
type
tcp
-
vkey
BlankRXZZzcxa!@##@!
Targets
-
- Target 2026-08-20_55547650bf43e9705b9c08c685892c1f_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- SHA256 8f72fb94309c3c0819bf2643b602b34942dbaea7d2e0761756025ca21bf082d3
- MD5 55547650bf43e9705b9c08c685892c1f
- SHA1 236a054145b7b810cbec3af318bd7b76acc7d54f
- SHA512 7c315f723fe4aacf7c1dfc61789d37b92576f2e4210c9912c73955411439cc6dea541bf33145f850b4a34e70109671e92222c204a8725cb2511616f89f2df00e
- SSDEEP 98304:CJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCX5:CeNLNek1VpqUesOYiqfxrstHvX
- TLSH T16C36F047B89000FAD1AAD2348A665662BB717CA50F2157D33B10B7F82F73BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects VSHELL Backdoor