General
- Target 2026-07-14_4f26fa3695e253d380c6eecb15e28dd3_avaddon_cobalt-strike_quasar-rat
- Size 6.6MB
- Sample260714-ej8xesdy6k
- SHA256 5659939f4db0ffd0eea240b74b618d5e9d91da0cddfdd2050d0fd243ab8829b8
- MD5 4f26fa3695e253d380c6eecb15e28dd3
- SHA1 057f9fb58a5495e5d92ec2a896ac73d43fd26a6f
- SHA512 3765041339ba1b3a6c00f63e80446255e44212bbb2a6dff881279c22b916b89c63837030f488b58d65c7fa4b2e43bffaf1de383148b97dbce9dbbcfa3fba93b3
- SSDEEP 196608:g8TIoqIosD1GNuAQ9Nc3wt9Gx7CmC8scTBmYyeDZ4QieF4rwu3:g8TIoj1drc372
- TLSH T1DD66D05AD19310FCC67BC6B18A1BB233F670F4295A30693E5B84DF746E11EA01E59F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_4f26fa3695e253d380c6eecb15e28dd3_avaddon_cobalt-strike_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_4f26fa3695e253d380c6eecb15e28dd3_avaddon_cobalt-strike_quasar-rat.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_4f26fa3695e253d380c6eecb15e28dd3_avaddon_cobalt-strike_quasar-rat
- Size 6.6MB
- SHA256 5659939f4db0ffd0eea240b74b618d5e9d91da0cddfdd2050d0fd243ab8829b8
- MD5 4f26fa3695e253d380c6eecb15e28dd3
- SHA1 057f9fb58a5495e5d92ec2a896ac73d43fd26a6f
- SHA512 3765041339ba1b3a6c00f63e80446255e44212bbb2a6dff881279c22b916b89c63837030f488b58d65c7fa4b2e43bffaf1de383148b97dbce9dbbcfa3fba93b3
- SSDEEP 196608:g8TIoqIosD1GNuAQ9Nc3wt9Gx7CmC8scTBmYyeDZ4QieF4rwu3:g8TIoj1drc372
- TLSH T1DD66D05AD19310FCC67BC6B18A1BB233F670F4295A30693E5B84DF746E11EA01E59F28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key