General
- Target 2026-10-22_5693956cb028e39bb2db96f5fa73471a_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- Sample261024-pzecvsbx9p
- SHA256 1c13ee33afdd57117f3d2b8c406ce633eca54970aa84382f69db3ed8a7c4bb2f
- MD5 5693956cb028e39bb2db96f5fa73471a
- SHA1 f0aa59422d5cdde8e34393c1505464f23f489d75
- SHA512 97c82b815bee303472cb988c271ffef918fa9579ad2562f290e95625b153da6ad02518096f08dbb0c97d35de75fc195d077269bea1bce76ff3a6844964f9a3ad
- SSDEEP 98304:PFGd68EFMIM0f8ARXaxa6kR5XbEgEk4Bg:PBrFxM0f9RK9c5Yl
- TLSH T1C136F047B89040FAC5AED134896A5222BA707C950F3157D73B51B3F82FB2BE86E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-22_5693956cb028e39bb2db96f5fa73471a_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
ws://115.190.170.185
Attributes
-
port
8084
-
salt
qwe123qwe
-
type
ws
-
vkey
qwe123qwe
Targets
-
- Target 2026-10-22_5693956cb028e39bb2db96f5fa73471a_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- SHA256 1c13ee33afdd57117f3d2b8c406ce633eca54970aa84382f69db3ed8a7c4bb2f
- MD5 5693956cb028e39bb2db96f5fa73471a
- SHA1 f0aa59422d5cdde8e34393c1505464f23f489d75
- SHA512 97c82b815bee303472cb988c271ffef918fa9579ad2562f290e95625b153da6ad02518096f08dbb0c97d35de75fc195d077269bea1bce76ff3a6844964f9a3ad
- SSDEEP 98304:PFGd68EFMIM0f8ARXaxa6kR5XbEgEk4Bg:PBrFxM0f9RK9c5Yl
- TLSH T1C136F047B89040FAC5AED134896A5222BA707C950F3157D73B51B3F82FB2BE86E79314
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects VSHELL Backdoor