General
- Target 2026-08-23_f773b63883b9dac56a4e3c53d7ee1863_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- Sample260823-shlbmaswew
- SHA256 c552f9f88c1410b209cfa4444bf2f5e18411cc89a918bd4d024c9194b4a0ddf7
- MD5 f773b63883b9dac56a4e3c53d7ee1863
- SHA1 384c03090f0a934832ef5918f471d47dff9fd3ab
- SHA512 1d2a380c02841d774165ed68c5cc505c1e28964abe0d6e8391beb64e5f550a98a7e035e78d4b9df0275f75dd422b45e110aaec53abf09d7e6b42cbb2bbcfd4b5
- SSDEEP 98304:CJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCe:CeNLNek1VpqUesOYiqfxrstHv
- TLSH T1A336F047B89000FAD5AAD2348A665662BB713CA50F2157D33B10B7F82F73BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-08-23_f773b63883b9dac56a4e3c53d7ee1863_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
52.128.224.234
Attributes
-
port
8089
-
salt
qwe123qwe
-
type
tcp
-
vkey
qwe123qwe
Targets
-
- Target 2026-08-23_f773b63883b9dac56a4e3c53d7ee1863_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- SHA256 c552f9f88c1410b209cfa4444bf2f5e18411cc89a918bd4d024c9194b4a0ddf7
- MD5 f773b63883b9dac56a4e3c53d7ee1863
- SHA1 384c03090f0a934832ef5918f471d47dff9fd3ab
- SHA512 1d2a380c02841d774165ed68c5cc505c1e28964abe0d6e8391beb64e5f550a98a7e035e78d4b9df0275f75dd422b45e110aaec53abf09d7e6b42cbb2bbcfd4b5
- SSDEEP 98304:CJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCe:CeNLNek1VpqUesOYiqfxrstHv
- TLSH T1A336F047B89000FAD5AAD2348A665662BB713CA50F2157D33B10B7F82F73BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects VSHELL Backdoor