General
- Target 2026-07-14_89ac8c8fbb370706f3af6732c5da9f70_avaddon_cobalt-strike_quasar-rat
- Size 6.3MB
- Sample260714-keyhsaby5s
- SHA256 98bc2448347504355bfaf3b23473ab279e2be591826d8bff536a739f5d22f1be
- MD5 89ac8c8fbb370706f3af6732c5da9f70
- SHA1 ec40a323e87f0cb76dddaa21236fd398f26b9a96
- SHA512 f317658568bf51197a3df9a950417d24cbe0fbf2da9eaf6363563af1ae4107fc9921beb4f63eae46d1be63bbe192c22eb29bc9693a97596f6e64868dcd7ef3b2
- SSDEEP 98304:bzGeJGo1EJ2uGr2YlG+3uq7ukPjA54CDosfZVa3BOE6:bvF1ElGBlG0ukPjHCMMV
- TLSH T19266D017E7A744E8D22BC138C75753327A32BC461A302E7E9A16D7306E66F10A71EB35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-07-14_89ac8c8fbb370706f3af6732c5da9f70_avaddon_cobalt-strike_quasar-rat.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-07-14_89ac8c8fbb370706f3af6732c5da9f70_avaddon_cobalt-strike_quasar-rat.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-07-14_89ac8c8fbb370706f3af6732c5da9f70_avaddon_cobalt-strike_quasar-rat
- Size 6.3MB
- SHA256 98bc2448347504355bfaf3b23473ab279e2be591826d8bff536a739f5d22f1be
- MD5 89ac8c8fbb370706f3af6732c5da9f70
- SHA1 ec40a323e87f0cb76dddaa21236fd398f26b9a96
- SHA512 f317658568bf51197a3df9a950417d24cbe0fbf2da9eaf6363563af1ae4107fc9921beb4f63eae46d1be63bbe192c22eb29bc9693a97596f6e64868dcd7ef3b2
- SSDEEP 98304:bzGeJGo1EJ2uGr2YlG+3uq7ukPjA54CDosfZVa3BOE6:bvF1ElGBlG0ukPjHCMMV
- TLSH T19266D017E7A744E8D22BC138C75753327A32BC461A302E7E9A16D7306E66F10A71EB35
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Identifies VirtualBox via ACPI registry values (likely anti-VM)
-
Looks for VirtualBox Guest Additions in registry
-
Looks for VMWare Tools registry key