General
- Target 2026-09-04_9b8f2805dcd195928b5a2d657c67367b_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.5MB
- Sample260905-cs6sbaveme
- SHA256 67e70fdeefa4e67980688ac55d6781134d4f3f245550f7d9fa8a8f30985ee5ba
- MD5 9b8f2805dcd195928b5a2d657c67367b
- SHA1 bf51e875b5660c9a72ea67c2835111389edd4fbe
- SHA512 c115160c5e350d9edbb510e0c295d569e4ab57361b9d974e63111381d711d737f448f050caac528e72cd198e4918b5f3c144877e7fd723a97e4b9ea5017527a8
- SSDEEP 98304:8FGd68EFMIM0f8ARXaxa6kR5XbEgEk4B5J:8BrFxM0f9RK9c5YlX
- TLSH T15A26F047B89040FAC5AED134896A5222BA707C950F3157D73B51B3F82FB2BE86E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_9b8f2805dcd195928b5a2d657c67367b_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
ws://101.43.18.99
Attributes
-
port
8100
-
salt
qwe123qwe
-
type
ws
-
vkey
qwe123qwe
Targets
-
- Target 2026-09-04_9b8f2805dcd195928b5a2d657c67367b_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.5MB
- SHA256 67e70fdeefa4e67980688ac55d6781134d4f3f245550f7d9fa8a8f30985ee5ba
- MD5 9b8f2805dcd195928b5a2d657c67367b
- SHA1 bf51e875b5660c9a72ea67c2835111389edd4fbe
- SHA512 c115160c5e350d9edbb510e0c295d569e4ab57361b9d974e63111381d711d737f448f050caac528e72cd198e4918b5f3c144877e7fd723a97e4b9ea5017527a8
- SSDEEP 98304:8FGd68EFMIM0f8ARXaxa6kR5XbEgEk4B5J:8BrFxM0f9RK9c5YlX
- TLSH T15A26F047B89040FAC5AED134896A5222BA707C950F3157D73B51B3F82FB2BE86E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects VSHELL Backdoor