General
- Target 2026-07-14_744a4cbffe2dca338c6f631ed089da35_avaddon_cobalt-strike_quasar-rat
- Size 8.4MB
- Sample260714-d869fsfy8v
- SHA256 1ebbc7796962614d968bc5173f9b19468316508412beef51e72da47578669f67
- MD5 744a4cbffe2dca338c6f631ed089da35
- SHA1 932297a26d7e6f55b87b65b179a8f41b8d8c42d8
- SHA512 575bba0ceede979bdf2b6d18126d70310853e54ca205fd10eae0e90b5cb0226549c656d74c2c29879d494b821c6250d851c0e22e92f9dcb0e3fe43c3de319fc4
- SSDEEP 196608:uduwGzsD1GNuAQ9Nc3wt9Gx7CmC8scTBmYyeDZ4QieF4rwuNa:uLGI1drc372O
- TLSH T1E496AE4295C71CF9D9EA9BB0A6936336B734FC658B359B3F9A04CA341D13AD06D1AF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_744a4cbffe2dca338c6f631ed089da35_avaddon_cobalt-strike_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_744a4cbffe2dca338c6f631ed089da35_avaddon_cobalt-strike_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_744a4cbffe2dca338c6f631ed089da35_avaddon_cobalt-strike_quasar-rat
- Size 8.4MB
- SHA256 1ebbc7796962614d968bc5173f9b19468316508412beef51e72da47578669f67
- MD5 744a4cbffe2dca338c6f631ed089da35
- SHA1 932297a26d7e6f55b87b65b179a8f41b8d8c42d8
- SHA512 575bba0ceede979bdf2b6d18126d70310853e54ca205fd10eae0e90b5cb0226549c656d74c2c29879d494b821c6250d851c0e22e92f9dcb0e3fe43c3de319fc4
- SSDEEP 196608:uduwGzsD1GNuAQ9Nc3wt9Gx7CmC8scTBmYyeDZ4QieF4rwuNa:uLGI1drc372O
- TLSH T1E496AE4295C71CF9D9EA9BB0A6936336B734FC658B359B3F9A04CA341D13AD06D1AF00
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key