General
- Target 2026-07-14_e0c15f68ad4f7a7b0a892a5e77c1b20b_avaddon_cobalt-strike_quasar-rat
- Size 6.2MB
- Sample260714-dcsq7ae131
- SHA256 04c7b42b6944f8348408890fe002a027d808b422f9797dd3ba6bc3a9e4be02bd
- MD5 e0c15f68ad4f7a7b0a892a5e77c1b20b
- SHA1 26237bd165830bf6d4efa0646556c1c29cc9cb73
- SHA512 b53012257a67147b3ecb31011d5f0ceccb5b3f4a0b5203bd07690fd52a0afa875365c8410497893237de4ab415bddfb6b0e9e5d06dbd046ccc15b3ace2954568
- SSDEEP 98304:HsvPtosSQw4ZL3wWsXYlG+3uq7ukPjA54CDosfZVa3BOE6:HmnSQw4ZL3zblG0ukPjHCMMV
- TLSH T1B266D027E7A744E8D26BC138C75793327931BC461A302E7E9A16C7206F66F10A71EB35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_e0c15f68ad4f7a7b0a892a5e77c1b20b_avaddon_cobalt-strike_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_e0c15f68ad4f7a7b0a892a5e77c1b20b_avaddon_cobalt-strike_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_e0c15f68ad4f7a7b0a892a5e77c1b20b_avaddon_cobalt-strike_quasar-rat
- Size 6.2MB
- SHA256 04c7b42b6944f8348408890fe002a027d808b422f9797dd3ba6bc3a9e4be02bd
- MD5 e0c15f68ad4f7a7b0a892a5e77c1b20b
- SHA1 26237bd165830bf6d4efa0646556c1c29cc9cb73
- SHA512 b53012257a67147b3ecb31011d5f0ceccb5b3f4a0b5203bd07690fd52a0afa875365c8410497893237de4ab415bddfb6b0e9e5d06dbd046ccc15b3ace2954568
- SSDEEP 98304:HsvPtosSQw4ZL3wWsXYlG+3uq7ukPjA54CDosfZVa3BOE6:HmnSQw4ZL3zblG0ukPjHCMMV
- TLSH T1B266D027E7A744E8D26BC138C75793327931BC461A302E7E9A16C7206F66F10A71EB35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key