General
- Target 2026-07-14_226e9cd9a7a992e44231d94863faefc5_avaddon_cobalt-strike_quasar-rat
- Size 6.3MB
- Sample260714-eyvncaes2k
- SHA256 0e019bf20993f771f4517c4c29ee45925c505ccb5ccdd127f4dbee78834ae03d
- MD5 226e9cd9a7a992e44231d94863faefc5
- SHA1 6ffc00911e0c739428ec73b480fa78f02222a565
- SHA512 a2c205606d596c6e6d182344206a9c48b3f2b6cc748cf924ab16d3d4744bcaf7b069e39bdc7eafe3409bbf3f091ae23ea3a7192bf9e4b58e29b09ffe8e4306d6
- SSDEEP 98304:4LvtQ8IOku5Ir2YlG+3uq7ukPjA54CDosfZVa3BOE6:45YOkkIBlG0ukPjHCMMV
- TLSH T1DB66D027E7A744E8D22BC138C75753327932BC461A302E7E9A56C7306E66F10A71EB35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_226e9cd9a7a992e44231d94863faefc5_avaddon_cobalt-strike_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_226e9cd9a7a992e44231d94863faefc5_avaddon_cobalt-strike_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_226e9cd9a7a992e44231d94863faefc5_avaddon_cobalt-strike_quasar-rat
- Size 6.3MB
- SHA256 0e019bf20993f771f4517c4c29ee45925c505ccb5ccdd127f4dbee78834ae03d
- MD5 226e9cd9a7a992e44231d94863faefc5
- SHA1 6ffc00911e0c739428ec73b480fa78f02222a565
- SHA512 a2c205606d596c6e6d182344206a9c48b3f2b6cc748cf924ab16d3d4744bcaf7b069e39bdc7eafe3409bbf3f091ae23ea3a7192bf9e4b58e29b09ffe8e4306d6
- SSDEEP 98304:4LvtQ8IOku5Ir2YlG+3uq7ukPjA54CDosfZVa3BOE6:45YOkkIBlG0ukPjHCMMV
- TLSH T1DB66D027E7A744E8D22BC138C75753327932BC461A302E7E9A56C7306E66F10A71EB35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key