General
- Target 2026-09-04_2a3755bdcdee82b83e345f9abf6d8c6d_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- Sample260905-s69zwsen91
- SHA256 95cdd3331e8cce96da1e77c2d5b2a5944d0f8f2f92984b3e7d5669cb9b8850d8
- MD5 2a3755bdcdee82b83e345f9abf6d8c6d
- SHA1 83250583c177e81322ac2c85aa0dc98ee2702e3c
- SHA512 6cc0f36cd5c8a0f05d99a188fa9e17c3e9833e35acf87953347dc5cd9c38b1df89664792577636a8ffe35453b055ab71280a08e252a639ae30bcffa14ea4ef74
- SSDEEP 98304:CJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCme:CeNLNek1VpqUesOYiqfxrstHvm
- TLSH T16436F047B89000FAD5AAD2348A665662BB717CA50F2117D33B10B7F82F73BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_2a3755bdcdee82b83e345f9abf6d8c6d_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
38.147.170.102
Attributes
-
port
8084
-
salt
ganfan123ganfan
-
type
tcp
-
vkey
ganfan123ganfan
Targets
-
- Target 2026-09-04_2a3755bdcdee82b83e345f9abf6d8c6d_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- SHA256 95cdd3331e8cce96da1e77c2d5b2a5944d0f8f2f92984b3e7d5669cb9b8850d8
- MD5 2a3755bdcdee82b83e345f9abf6d8c6d
- SHA1 83250583c177e81322ac2c85aa0dc98ee2702e3c
- SHA512 6cc0f36cd5c8a0f05d99a188fa9e17c3e9833e35acf87953347dc5cd9c38b1df89664792577636a8ffe35453b055ab71280a08e252a639ae30bcffa14ea4ef74
- SSDEEP 98304:CJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCme:CeNLNek1VpqUesOYiqfxrstHvm
- TLSH T16436F047B89000FAD5AAD2348A665662BB717CA50F2117D33B10B7F82F73BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects VSHELL Backdoor