General
- Target 2026-11-11_540348e3a1efe9a08e500f1bc4fb0464_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.5MB
- Sample261113-pergpabt2x
- SHA256 3dd5cab8cc6520b00a9bed04fe469aea09a4e40c41b95738d1c7231592a419d7
- MD5 540348e3a1efe9a08e500f1bc4fb0464
- SHA1 a7ec17f460adcef3e8fe7660049016d624f47733
- SHA512 213b03b0ad81d210d2b3b66740bda75e2bfc802566fc9b30b502dca0c169d416dcd0a8e2e4abea30fac09efa63bc1aa5c7c0fca8b35d6a6c1887df17bc593537
- SSDEEP 98304:mJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCf1:meNLNek1VpqUesOYiqfxrstHvf
- TLSH T11B26F047B89000FAD5AAD2348A665662BB717CA50F2117D33B10B7F82F73BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-11-11_540348e3a1efe9a08e500f1bc4fb0464_cobalt-strike_dosia_luca-stealer_quasar-rat.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
vshell
C2
-
130.94.33.140
Attributes
-
port
8080
-
salt
qwe123qwe
-
type
tcp
-
vkey
qwe123qwe
Targets
-
- Target 2026-11-11_540348e3a1efe9a08e500f1bc4fb0464_cobalt-strike_dosia_luca-stealer_quasar-rat
- Size 4.5MB
- SHA256 3dd5cab8cc6520b00a9bed04fe469aea09a4e40c41b95738d1c7231592a419d7
- MD5 540348e3a1efe9a08e500f1bc4fb0464
- SHA1 a7ec17f460adcef3e8fe7660049016d624f47733
- SHA512 213b03b0ad81d210d2b3b66740bda75e2bfc802566fc9b30b502dca0c169d416dcd0a8e2e4abea30fac09efa63bc1aa5c7c0fca8b35d6a6c1887df17bc593537
- SSDEEP 98304:mJ/QNLNChxk1EnGpqUeSMBk7ig9nzGqk/UxrstHgCf1:meNLNek1VpqUesOYiqfxrstHvf
- TLSH T11B26F047B89000FAD5AAD2348A665662BB717CA50F2117D33B10B7F82F73BE85E39354
- MD5 SHA1 SHA512 SSDEEP TLSH
Detects VSHELL Backdoor