General
- Target 2026-07-14_6228541677bf6e100d549abe93b9b423_avaddon_cobalt-strike_quasar-rat
- Size 6.2MB
- Sample260714-ed4eradx4l
- SHA256 e1d74c6acb85c5c07890d0f5127046279b2a96f965067b56bccdb176f02f4c64
- MD5 6228541677bf6e100d549abe93b9b423
- SHA1 cd850eb904ae081f951121e8c4444c35e9b641e5
- SHA512 80a6624b87644eee3529d8f1af3be4c9c6dd156878cebd34621da1b4e3bbb06d95a4a6071f6bce55fcfb3fe8b6ea148b6b736878b8d85943d297895f660280b6
- SSDEEP 98304:/uvPtosaAwCZL3w2sGYlG+3uq7ukPjA54CDosfZVa3BOE6:/snaAwCZL3julG0ukPjHCMMV
- TLSH T13966D027E7A744E8D26BC138C75793327931B8461A302E7E9A16C7206F66F10A71EB35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_6228541677bf6e100d549abe93b9b423_avaddon_cobalt-strike_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_6228541677bf6e100d549abe93b9b423_avaddon_cobalt-strike_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_6228541677bf6e100d549abe93b9b423_avaddon_cobalt-strike_quasar-rat
- Size 6.2MB
- SHA256 e1d74c6acb85c5c07890d0f5127046279b2a96f965067b56bccdb176f02f4c64
- MD5 6228541677bf6e100d549abe93b9b423
- SHA1 cd850eb904ae081f951121e8c4444c35e9b641e5
- SHA512 80a6624b87644eee3529d8f1af3be4c9c6dd156878cebd34621da1b4e3bbb06d95a4a6071f6bce55fcfb3fe8b6ea148b6b736878b8d85943d297895f660280b6
- SSDEEP 98304:/uvPtosaAwCZL3w2sGYlG+3uq7ukPjA54CDosfZVa3BOE6:/snaAwCZL3julG0ukPjHCMMV
- TLSH T13966D027E7A744E8D26BC138C75793327931B8461A302E7E9A16C7206F66F10A71EB35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10Identifies VirtualBox via ACPI registry values (likely anti-VM)
Looks for VirtualBox Guest Additions in registry
Looks for VMWare Tools registry key