General
- Target 2026-08-23_fddef21120dab4961d1ecc67978b6484_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- Sample260823-rjs77asva1
- SHA256 597ffbc191efdab2fc308eecf6ede7f96abfba31f74109a0b8c812a21f20d70c
- MD5 fddef21120dab4961d1ecc67978b6484
- SHA1 a871184102588e1e5c02bd223e85a40546f7a217
- SHA512 31249bcd760f45332c4e09dfa7739cd84379092ddb27a314ce3aa1c552292f4eb098107f56ed241706f08d7c322d49486c5ec1c96c19cd8de4206e06595ca79a
- SSDEEP 98304:CJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCO:CeNLNek1VpqUesOYiqfxrstHv
- TLSH T14136F047B89000FAD5AAD2348A665662BB713CA50F3157D33B10B7F82F72BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_fddef21120dab4961d1ecc67978b6484_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
172.245.148.13
Attributes
-
port
4567
-
salt
qwe123qwe
-
type
tcp
-
vkey
qwe123qwe
Targets
-
- Target 2026-08-23_fddef21120dab4961d1ecc67978b6484_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- SHA256 597ffbc191efdab2fc308eecf6ede7f96abfba31f74109a0b8c812a21f20d70c
- MD5 fddef21120dab4961d1ecc67978b6484
- SHA1 a871184102588e1e5c02bd223e85a40546f7a217
- SHA512 31249bcd760f45332c4e09dfa7739cd84379092ddb27a314ce3aa1c552292f4eb098107f56ed241706f08d7c322d49486c5ec1c96c19cd8de4206e06595ca79a
- SSDEEP 98304:CJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCO:CeNLNek1VpqUesOYiqfxrstHv
- TLSH T14136F047B89000FAD5AAD2348A665662BB713CA50F3157D33B10B7F82F72BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects VSHELL Backdoor