General
- Target 2026-07-14_94656a7af00c8a43c67cd75819b263d5_avaddon_cobalt-strike_quasar-rat
- Size 8.4MB
- Sample260714-d1xeaadt8j
- SHA256 fc62e0f8b0760ad7d230556f3e139046a05ee59f58b1c83672ce36aeec675c00
- MD5 94656a7af00c8a43c67cd75819b263d5
- SHA1 6769daa007e29359bbffe493075868b6b2ab10c0
- SHA512 6657d7bea546bfd57a736e5d3ac0e5dbdb28f1e5704e8bdcdb3a6c076b802103109c57e0cca82db960c86fe4f18a9a735e08d2a2f08c8578c523471d34502b84
- SSDEEP 196608:cd7EPbsD1GNuAQ9Nc3wt9Gx7CmC8scTBmYyeDZ4QieF4rwuS:cGo1drc372M
- TLSH T10396AE4295C71CF9D9EA9BB095977336B334FC658B35AB2F9A08CA341D13AD06D1AF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_94656a7af00c8a43c67cd75819b263d5_avaddon_cobalt-strike_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_94656a7af00c8a43c67cd75819b263d5_avaddon_cobalt-strike_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_94656a7af00c8a43c67cd75819b263d5_avaddon_cobalt-strike_quasar-rat
- Size 8.4MB
- SHA256 fc62e0f8b0760ad7d230556f3e139046a05ee59f58b1c83672ce36aeec675c00
- MD5 94656a7af00c8a43c67cd75819b263d5
- SHA1 6769daa007e29359bbffe493075868b6b2ab10c0
- SHA512 6657d7bea546bfd57a736e5d3ac0e5dbdb28f1e5704e8bdcdb3a6c076b802103109c57e0cca82db960c86fe4f18a9a735e08d2a2f08c8578c523471d34502b84
- SSDEEP 196608:cd7EPbsD1GNuAQ9Nc3wt9Gx7CmC8scTBmYyeDZ4QieF4rwuS:cGo1drc372M
- TLSH T10396AE4295C71CF9D9EA9BB095977336B334FC658B35AB2F9A08CA341D13AD06D1AF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key