General
- Target 2026-07-14_b6a5bdc6c390758242035a9bd2fd589b_avaddon_cobalt-strike_quasar-rat
- Size 6.3MB
- Sample260714-dp4n8ac18j
- SHA256 7e305f3250aa40b02994cb2d133c4d3ac10e02c5ebcd419774c65e0168d5cea9
- MD5 b6a5bdc6c390758242035a9bd2fd589b
- SHA1 d7e4bf7785994716e5d01b8e1ef39e8507bb1e54
- SHA512 99e7f8a15089806a17144c17788cd1aa05ea126af7b1505df2b78d90154c8f1bb471f906916ca74fea1bed308e2f1b45884109ce6fa91e96c4dcf19deec74e8b
- SSDEEP 196608:/duwG9sD1GNuAQ9Nc3wt9Gx7CmC8scTBmYyeDZ4QieF4rwu4:/LGq1drc372
- TLSH T14D66D019D69350FCC67BC6708A1BB233FA60B42D5630693E5B84DF786E15EB01E19F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_b6a5bdc6c390758242035a9bd2fd589b_avaddon_cobalt-strike_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_b6a5bdc6c390758242035a9bd2fd589b_avaddon_cobalt-strike_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_b6a5bdc6c390758242035a9bd2fd589b_avaddon_cobalt-strike_quasar-rat
- Size 6.3MB
- SHA256 7e305f3250aa40b02994cb2d133c4d3ac10e02c5ebcd419774c65e0168d5cea9
- MD5 b6a5bdc6c390758242035a9bd2fd589b
- SHA1 d7e4bf7785994716e5d01b8e1ef39e8507bb1e54
- SHA512 99e7f8a15089806a17144c17788cd1aa05ea126af7b1505df2b78d90154c8f1bb471f906916ca74fea1bed308e2f1b45884109ce6fa91e96c4dcf19deec74e8b
- SSDEEP 196608:/duwG9sD1GNuAQ9Nc3wt9Gx7CmC8scTBmYyeDZ4QieF4rwu4:/LGq1drc372
- TLSH T14D66D019D69350FCC67BC6708A1BB233FA60B42D5630693E5B84DF786E15EB01E19F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key