General
- Target 2026-07-13_3e179741a6f730cd1794a039fb33f7ab_avaddon_cobalt-strike_quasar-rat
- Size 6.6MB
- Sample260714-bxtg4scs6n
- SHA256 527d79824753d69c577ab7a117ff163ab364e59fb32596bd0fd165f05c35e04e
- MD5 3e179741a6f730cd1794a039fb33f7ab
- SHA1 3bf2ff2b78996cece6e113b7d81eb5b9a0f6465a
- SHA512 f5d67083e1950ee4653582f7331af90dace3dd508e8861b5e8934e69e6b8fb77622dc424724fb9c85aebe07939ac799e5cd6e0f69a67fd8fc8a7066683cc8879
- SSDEEP 196608:d8TIoqIosD1GNuAQ9Nc3wt9Gx7CmC8scTBmYyeDZ4QieF4rwu3:d8TIoj1drc372
- TLSH T11A66D05AD19310FCC67BC6B18A1BB233F670F4295A30693E5B84DF746E11EA01E59F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-13_3e179741a6f730cd1794a039fb33f7ab_avaddon_cobalt-strike_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-13_3e179741a6f730cd1794a039fb33f7ab_avaddon_cobalt-strike_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-13_3e179741a6f730cd1794a039fb33f7ab_avaddon_cobalt-strike_quasar-rat
- Size 6.6MB
- SHA256 527d79824753d69c577ab7a117ff163ab364e59fb32596bd0fd165f05c35e04e
- MD5 3e179741a6f730cd1794a039fb33f7ab
- SHA1 3bf2ff2b78996cece6e113b7d81eb5b9a0f6465a
- SHA512 f5d67083e1950ee4653582f7331af90dace3dd508e8861b5e8934e69e6b8fb77622dc424724fb9c85aebe07939ac799e5cd6e0f69a67fd8fc8a7066683cc8879
- SSDEEP 196608:d8TIoqIosD1GNuAQ9Nc3wt9Gx7CmC8scTBmYyeDZ4QieF4rwu3:d8TIoj1drc372
- TLSH T11A66D05AD19310FCC67BC6B18A1BB233F670F4295A30693E5B84DF746E11EA01E59F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key