General
- Target 2026-10-26_1eb652e83c5fea6a5d83e6cfcbdba062_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- Sample261026-espvxaby81
- SHA256 f66c1437945995ce7c0bd02af9c9ef8ea9f68098deb406ba83e8b5eb487b3b0d
- MD5 1eb652e83c5fea6a5d83e6cfcbdba062
- SHA1 0906d4a668fc8a44188b6c72d9f69c3202209354
- SHA512 fc3dbb5642d9b5c0a330879ab5e6b068974a467c34a7f416e82e928ab78bdffc9e57b502bed9ca0dafcae120735688bb9be4a16c96f7d2688875e1b2af5ed54f
- SSDEEP 98304:PFGd68EFMIM0f8ARXaxa6kR5XbEgEk4B7:PBrFxM0f9RK9c5Yl
- TLSH T12236F047B89040FAC5AED134896A5222BA707C950F3117D73B51B3F82FB2BE86E79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-10-26_1eb652e83c5fea6a5d83e6cfcbdba062_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
ws://64.188.26.172
Attributes
-
port
10000
-
salt
qwe123qweqwe
-
type
ws
-
vkey
qwe123qweqwe
Targets
-
- Target 2026-10-26_1eb652e83c5fea6a5d83e6cfcbdba062_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.9MB
- SHA256 f66c1437945995ce7c0bd02af9c9ef8ea9f68098deb406ba83e8b5eb487b3b0d
- MD5 1eb652e83c5fea6a5d83e6cfcbdba062
- SHA1 0906d4a668fc8a44188b6c72d9f69c3202209354
- SHA512 fc3dbb5642d9b5c0a330879ab5e6b068974a467c34a7f416e82e928ab78bdffc9e57b502bed9ca0dafcae120735688bb9be4a16c96f7d2688875e1b2af5ed54f
- SSDEEP 98304:PFGd68EFMIM0f8ARXaxa6kR5XbEgEk4B7:PBrFxM0f9RK9c5Yl
- TLSH T12236F047B89040FAC5AED134896A5222BA707C950F3117D73B51B3F82FB2BE86E79354
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects VSHELL Backdoor