General
- Target 2026-09-27_73fa472915de0a381c2106c9927d9f6a_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.5MB
- Sample260928-e7p48avdke
- SHA256 d50ecaf6b8860c34280d046b8a908642a6af542e14c324c47dee7bdcc16202a9
- MD5 73fa472915de0a381c2106c9927d9f6a
- SHA1 66ae39c7de648d43ecb129166a6bccd818c5d328
- SHA512 d1a3a4a15d6de7e03fc6c95015f18d789f322a178396fad7fe9edf472600c6bc1db72ddb1734415f9e3c1089dce3258fdde6bd205ad31880afae6f727414a316
- SSDEEP 98304:mJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCuv:meNLNek1VpqUesOYiqfxrstHvu
- TLSH T18D26F047B89000FAD5AAD2348A665662BB713CA50F3157D33B10B7F82F72BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-27_73fa472915de0a381c2106c9927d9f6a_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
64.81.114.71
Attributes
-
port
8888
-
salt
qwe123qwe
-
type
tcp
-
vkey
qwe123qwe
Targets
-
- Target 2026-09-27_73fa472915de0a381c2106c9927d9f6a_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.5MB
- SHA256 d50ecaf6b8860c34280d046b8a908642a6af542e14c324c47dee7bdcc16202a9
- MD5 73fa472915de0a381c2106c9927d9f6a
- SHA1 66ae39c7de648d43ecb129166a6bccd818c5d328
- SHA512 d1a3a4a15d6de7e03fc6c95015f18d789f322a178396fad7fe9edf472600c6bc1db72ddb1734415f9e3c1089dce3258fdde6bd205ad31880afae6f727414a316
- SSDEEP 98304:mJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCuv:meNLNek1VpqUesOYiqfxrstHvu
- TLSH T18D26F047B89000FAD5AAD2348A665662BB713CA50F3157D33B10B7F82F72BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects VSHELL Backdoor