General
- Target 2026-09-01_6af3427a5f6776574d81b0cd14961334_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- Sample260903-me5cfavcmc
- SHA256 7ac31398299883d44f54734b94081f4641f0e0dc9bde5a4e038559b3859243ed
- MD5 6af3427a5f6776574d81b0cd14961334
- SHA1 bd93163573234be1d0444547574497c7a4abf0cb
- SHA512 f2db0a5131df31f9bf13772d52710379554ff02dc53e231bbe913952ee38a8a4dbb3df9c18079cd69b9034689d6e67a622970e97c8e29ad195181df9384378c0
- SSDEEP 98304:PFGd68EFMIM0f8ARXaxa6kR5XbEgEk4BE:PBrFxM0f9RK9c5Yl
- TLSH T10036F047B89040FAC5AED134896A5222BA707C950F3157D73B51B3F82FB2BE86E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-01_6af3427a5f6776574d81b0cd14961334_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
ws://45.136.14.91
Attributes
-
port
80
-
salt
adminsb123
-
type
ws
-
vkey
adminsb123
Targets
-
- Target 2026-09-01_6af3427a5f6776574d81b0cd14961334_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- SHA256 7ac31398299883d44f54734b94081f4641f0e0dc9bde5a4e038559b3859243ed
- MD5 6af3427a5f6776574d81b0cd14961334
- SHA1 bd93163573234be1d0444547574497c7a4abf0cb
- SHA512 f2db0a5131df31f9bf13772d52710379554ff02dc53e231bbe913952ee38a8a4dbb3df9c18079cd69b9034689d6e67a622970e97c8e29ad195181df9384378c0
- SSDEEP 98304:PFGd68EFMIM0f8ARXaxa6kR5XbEgEk4BE:PBrFxM0f9RK9c5Yl
- TLSH T10036F047B89040FAC5AED134896A5222BA707C950F3157D73B51B3F82FB2BE86E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects VSHELL Backdoor