General
- Target 2026-10-16_5dfb076216dd9830a0d5b98d22c4efbc_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- Sample261017-tykkpsav6w
- SHA256 044b22e715661e0e4c1a3e1bca985a23bc1e8eb45a424c08aa0236088ec8ddb7
- MD5 5dfb076216dd9830a0d5b98d22c4efbc
- SHA1 b54f9ed52fd65d6952e959eb390d14b7ebdd8ae5
- SHA512 2cf6b1c63afa2b026527f4e90def68b12da72254fac2dfb32ca442737fbf23aaf389fb222f0d380956a9835d23b9773ed8eb2521d362076994fd7dacdb09f67d
- SSDEEP 98304:PFGd68EFMIM0f8ARXaxa6kR5XbEgEk4BJO:PBrFxM0f9RK9c5Yl
- TLSH T1BE36F047B89040FAC5AED134896A5222BA707C950F3157D73B51B3F82FB2BE86E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-16_5dfb076216dd9830a0d5b98d22c4efbc_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
ws://38.60.176.17
Attributes
-
port
57213
-
salt
yQG4j2UZWIn5JrxkppF7e7wp
-
type
ws
-
vkey
LEbkjhxw9t3e1YuXXw1zjX8M
Targets
-
- Target 2026-10-16_5dfb076216dd9830a0d5b98d22c4efbc_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- SHA256 044b22e715661e0e4c1a3e1bca985a23bc1e8eb45a424c08aa0236088ec8ddb7
- MD5 5dfb076216dd9830a0d5b98d22c4efbc
- SHA1 b54f9ed52fd65d6952e959eb390d14b7ebdd8ae5
- SHA512 2cf6b1c63afa2b026527f4e90def68b12da72254fac2dfb32ca442737fbf23aaf389fb222f0d380956a9835d23b9773ed8eb2521d362076994fd7dacdb09f67d
- SSDEEP 98304:PFGd68EFMIM0f8ARXaxa6kR5XbEgEk4BJO:PBrFxM0f9RK9c5Yl
- TLSH T1BE36F047B89040FAC5AED134896A5222BA707C950F3157D73B51B3F82FB2BE86E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects VSHELL Backdoor