General
- Target 2026-07-14_22818349d1feff990f770b9773630c58_avaddon_cobalt-strike_quasar-rat
- Size 6.3MB
- Sample260714-eypr4ad19q
- SHA256 8ce12eb4a24d2a557e9588c0ba2eb3c8de2a88ae11a4630ece54ba976d7c4656
- MD5 22818349d1feff990f770b9773630c58
- SHA1 756ef20c203b72bd91f9548ce352a5921aed3481
- SHA512 4a6449ed65a1a3af20ce2876fd013d260a99808106ee27537d684cc05790250d98629e9319c968b3789e72e8b4d3c33c1eee443841d52879873a831b486d4777
- SSDEEP 196608:plvt5OsD1GNuAQ9Nc3wt9Gx7CmC8scTBmYyeDZ4QieF4rwuwqm:pb5V1drc372Lm
- TLSH T16866D019D29350FCC67FC6718A1BB233FA60B42D5630A92E5B44DF786E15EA01E1DF28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_22818349d1feff990f770b9773630c58_avaddon_cobalt-strike_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_22818349d1feff990f770b9773630c58_avaddon_cobalt-strike_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_22818349d1feff990f770b9773630c58_avaddon_cobalt-strike_quasar-rat
- Size 6.3MB
- SHA256 8ce12eb4a24d2a557e9588c0ba2eb3c8de2a88ae11a4630ece54ba976d7c4656
- MD5 22818349d1feff990f770b9773630c58
- SHA1 756ef20c203b72bd91f9548ce352a5921aed3481
- SHA512 4a6449ed65a1a3af20ce2876fd013d260a99808106ee27537d684cc05790250d98629e9319c968b3789e72e8b4d3c33c1eee443841d52879873a831b486d4777
- SSDEEP 196608:plvt5OsD1GNuAQ9Nc3wt9Gx7CmC8scTBmYyeDZ4QieF4rwuwqm:pb5V1drc372Lm
- TLSH T16866D019D29350FCC67FC6718A1BB233FA60B42D5630A92E5B44DF786E15EA01E1DF28
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key