General
- Target 2026-07-14_63af37795d18ad6b6773b3a371d3a41b_avaddon_cobalt-strike_quasar-rat
- Size 6.3MB
- Sample260714-hmcvyaav3s
- SHA256 e5a03fb50f763a20a63ac2a9787365a1342de666e64612b80040256eeeb2e403
- MD5 63af37795d18ad6b6773b3a371d3a41b
- SHA1 d15b3ec4e4b25e502657751a436521edf67ea5c0
- SHA512 d88cae5ba827d0bbb76bee3e08c2451114e70f9a1889cdc5658eb2193f51e746337e5da8c02eee0a70436d2384f19cd073746bc0cb2b688acd0f91cc9913e0f5
- SSDEEP 98304:EDRxNcc+aptJvuYlG+3uq7ukPjA54CDosfZVa3BOE6:EKc+aptJ1lG0ukPjHCMMV
- TLSH T12466D027E7A744ECD26BC138875B53327A31B8451A303A7E9A16C7306E66F10A71EF35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_63af37795d18ad6b6773b3a371d3a41b_avaddon_cobalt-strike_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_63af37795d18ad6b6773b3a371d3a41b_avaddon_cobalt-strike_quasar-rat.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_63af37795d18ad6b6773b3a371d3a41b_avaddon_cobalt-strike_quasar-rat
- Size 6.3MB
- SHA256 e5a03fb50f763a20a63ac2a9787365a1342de666e64612b80040256eeeb2e403
- MD5 63af37795d18ad6b6773b3a371d3a41b
- SHA1 d15b3ec4e4b25e502657751a436521edf67ea5c0
- SHA512 d88cae5ba827d0bbb76bee3e08c2451114e70f9a1889cdc5658eb2193f51e746337e5da8c02eee0a70436d2384f19cd073746bc0cb2b688acd0f91cc9913e0f5
- SSDEEP 98304:EDRxNcc+aptJvuYlG+3uq7ukPjA54CDosfZVa3BOE6:EKc+aptJ1lG0ukPjHCMMV
- TLSH T12466D027E7A744ECD26BC138875B53327A31B8451A303A7E9A16C7306E66F10A71EF35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key