General
- Target 2026-07-14_a87e48cd6122a84d5d0a7cb671c4c656_avaddon_cobalt-strike_quasar-rat
- Size 6.3MB
- Sample260714-dvkhjafv51
- SHA256 3c1215a072b102b8f771def1be919531fab72ec6e1a28fe52dc5a684be52df30
- MD5 a87e48cd6122a84d5d0a7cb671c4c656
- SHA1 af2adb8624066013e040d7133f2406a1e75ff48f
- SHA512 70723be44f55cf059d8d8d9652e347596ebb3ea1ea4235eaaf993938587c782bf94b35c732aba6022f6264e2bf4316b26635f6c6df7c4e2df44051934e6063dc
- SSDEEP 98304:bDRxNcc+apcJvuYlG+3uq7ukPjA54CDosfZVa3BOE6:bKc+apcJ1lG0ukPjHCMMV
- TLSH T1EE66D027E7A744ECD26BC138875B53327A31B8451A303A7E9A16C7306E66F10A71EF35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_a87e48cd6122a84d5d0a7cb671c4c656_avaddon_cobalt-strike_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_a87e48cd6122a84d5d0a7cb671c4c656_avaddon_cobalt-strike_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_a87e48cd6122a84d5d0a7cb671c4c656_avaddon_cobalt-strike_quasar-rat
- Size 6.3MB
- SHA256 3c1215a072b102b8f771def1be919531fab72ec6e1a28fe52dc5a684be52df30
- MD5 a87e48cd6122a84d5d0a7cb671c4c656
- SHA1 af2adb8624066013e040d7133f2406a1e75ff48f
- SHA512 70723be44f55cf059d8d8d9652e347596ebb3ea1ea4235eaaf993938587c782bf94b35c732aba6022f6264e2bf4316b26635f6c6df7c4e2df44051934e6063dc
- SSDEEP 98304:bDRxNcc+apcJvuYlG+3uq7ukPjA54CDosfZVa3BOE6:bKc+apcJ1lG0ukPjHCMMV
- TLSH T1EE66D027E7A744ECD26BC138875B53327A31B8451A303A7E9A16C7306E66F10A71EF35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key