Resubmissions

21-09-2024 09:25

240921-ldxqjavfrl 9

21-09-2024 09:15

240921-k7wjwsvdjl 9

16-09-2024 16:44

240916-t835ssybne 8

16-09-2024 16:43

240916-t8dj5sycpn 6

16-09-2024 16:40

240916-t6slaayalb 6

16-09-2024 16:38

240916-t5f6vsyarn 6

16-09-2024 15:40

240916-s4cxdawapp 6

16-09-2024 15:36

240916-s15g8avhnq 6

15-09-2024 16:29

240915-ty7p8stbll 7

General

  • Target

    Quantis.zip

  • Size

    18.7MB

  • MD5

    38a73a94c2c75b0ac0110313a41c41f7

  • SHA1

    b3c057ffd2b1ee7b30dc1c5928ea132c9e54fef6

  • SHA256

    4eba6432f90b9a2ab21f7d2e122a7cb7c0798258dcddaa8be415568e8ac1c326

  • SHA512

    cd215e1a2761d0fe0ffeb0ec9baca0baed00493da7b9f016286c3e940725059ad92aa451d1732618ed533acf021f87da4c4db34b2b337642a1c5287dbe4b848d

  • SSDEEP

    393216:QuX5Dddyy7lWdbvbUf4/p75fi0xewONXnny441vbiuDr6IWtm6FAzc09MZBXp:QupZdyekbI4/p7Fi0xewgX41vb9Xdem2

Score
3/10

Malware Config

Signatures

  • Embeds OpenSSL 1 IoCs

    Embeds OpenSSL, may be used to circumvent TLS interception.

  • Unsigned PE 7 IoCs

    Checks for missing Authenticode signature.

Files

  • Quantis.zip
    .zip
  • Microsoft.Web.WebView2.Core.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Web.WebView2.WinForms.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Microsoft.Web.WebView2.Wpf.dll
    .dll windows:4 windows x86 arch:x86

    dae02f32a21e03ce65412f6e56942daa


    Code Sign

    Headers

    Imports

    Sections

  • Quantis.dll
    .dll windows:6 windows x64 arch:x64

    95f4381b8627ec28443052a66f4884e4


    Headers

    Imports

    Exports

    Sections

  • QuantisUI.deps.json
  • QuantisUI.dll
    .exe windows:4 windows x64 arch:x64


    Headers

    Sections

  • QuantisUI.exe
    .exe windows:6 windows x64 arch:x64

    6a91eb82bfd19d2706c7d43c46f7064e


    Headers

    Imports

    Sections

  • QuantisUI.exe.WebView2/EBWebView/Crashpad/settings.dat
  • QuantisUI.exe.WebView2/EBWebView/Crashpad/throttle_store.dat
  • QuantisUI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_0
  • QuantisUI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_1
  • QuantisUI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_2
  • QuantisUI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/data_3
  • QuantisUI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/f_000001
    .gz
  • f_000001
  • QuantisUI.exe.WebView2/EBWebView/Default/Cache/Cache_Data/index
  • QuantisUI.exe.WebView2/EBWebView/Default/Code Cache/js/index
  • QuantisUI.exe.WebView2/EBWebView/Default/Code Cache/js/index-dir/the-real-index
  • QuantisUI.exe.WebView2/EBWebView/Default/Code Cache/wasm/index
  • QuantisUI.exe.WebView2/EBWebView/Default/Code Cache/wasm/index-dir/the-real-index
  • QuantisUI.exe.WebView2/EBWebView/Default/DIPS
  • QuantisUI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_0
  • QuantisUI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_1
  • QuantisUI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_2
  • QuantisUI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/data_3
  • QuantisUI.exe.WebView2/EBWebView/Default/DawnGraphiteCache/index
  • QuantisUI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_0
  • QuantisUI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_1
  • QuantisUI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_2
  • QuantisUI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/data_3
  • QuantisUI.exe.WebView2/EBWebView/Default/DawnWebGPUCache/index
  • QuantisUI.exe.WebView2/EBWebView/Default/EdgeEDrop/EdgeEDropSQLite.db
  • QuantisUI.exe.WebView2/EBWebView/Default/EdgeHubAppUsage/EdgeHubAppUsageSQLite.db
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension Rules/000003.log
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension Rules/CURRENT
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension Rules/LOG
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension Rules/MANIFEST-000001
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension Scripts/000003.log
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension Scripts/CURRENT
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension Scripts/LOG
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension Scripts/MANIFEST-000001
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension State/000003.log
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension State/CURRENT
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension State/LOG
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension State/LOG.old
  • QuantisUI.exe.WebView2/EBWebView/Default/Extension State/MANIFEST-000001
  • QuantisUI.exe.WebView2/EBWebView/Default/ExtensionActivityComp
  • QuantisUI.exe.WebView2/EBWebView/Default/ExtensionActivityEdge
  • QuantisUI.exe.WebView2/EBWebView/Default/Favicons
  • QuantisUI.exe.WebView2/EBWebView/Default/GPUCache/data_0
  • QuantisUI.exe.WebView2/EBWebView/Default/GPUCache/data_1
  • QuantisUI.exe.WebView2/EBWebView/Default/GPUCache/data_2
  • QuantisUI.exe.WebView2/EBWebView/Default/GPUCache/data_3
  • QuantisUI.exe.WebView2/EBWebView/Default/GPUCache/index
  • QuantisUI.exe.WebView2/EBWebView/Default/History
  • QuantisUI.exe.WebView2/EBWebView/Default/Local Storage/leveldb/CURRENT
  • QuantisUI.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG
  • QuantisUI.exe.WebView2/EBWebView/Default/Local Storage/leveldb/LOG.old
  • QuantisUI.exe.WebView2/EBWebView/Default/Local Storage/leveldb/MANIFEST-000001
  • QuantisUI.exe.WebView2/EBWebView/Default/Login Data
  • QuantisUI.exe.WebView2/EBWebView/Default/Network Action Predictor
  • QuantisUI.exe.WebView2/EBWebView/Default/Network/Cookies
  • QuantisUI.exe.WebView2/EBWebView/Default/Network/Network Persistent State
  • QuantisUI.exe.WebView2/EBWebView/Default/Network/Reporting and NEL
  • QuantisUI.exe.WebView2/EBWebView/Default/Network/SCT Auditing Pending Reports
  • QuantisUI.exe.WebView2/EBWebView/Default/Network/Sdch Dictionaries
  • QuantisUI.exe.WebView2/EBWebView/Default/Network/TransportSecurity
  • QuantisUI.exe.WebView2/EBWebView/Default/Network/Trust Tokens
  • QuantisUI.exe.WebView2/EBWebView/Default/Preferences
  • QuantisUI.exe.WebView2/EBWebView/Default/PreferredApps
  • QuantisUI.exe.WebView2/EBWebView/Default/README
  • QuantisUI.exe.WebView2/EBWebView/Default/Safe Browsing Network/Safe Browsing Cookies
  • QuantisUI.exe.WebView2/EBWebView/Default/Secure Preferences
  • QuantisUI.exe.WebView2/EBWebView/Default/Session Storage/000003.log
  • QuantisUI.exe.WebView2/EBWebView/Default/Session Storage/CURRENT
  • QuantisUI.exe.WebView2/EBWebView/Default/Session Storage/LOG
  • QuantisUI.exe.WebView2/EBWebView/Default/Session Storage/LOG.old
  • QuantisUI.exe.WebView2/EBWebView/Default/Session Storage/MANIFEST-000001
  • QuantisUI.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index
  • QuantisUI.exe.WebView2/EBWebView/Default/Shared Dictionary/cache/index-dir/the-real-index
  • QuantisUI.exe.WebView2/EBWebView/Default/Shared Dictionary/db
  • QuantisUI.exe.WebView2/EBWebView/Default/SharedStorage
  • QuantisUI.exe.WebView2/EBWebView/Default/Site Characteristics Database/000003.log
  • QuantisUI.exe.WebView2/EBWebView/Default/Site Characteristics Database/CURRENT
  • QuantisUI.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG
  • QuantisUI.exe.WebView2/EBWebView/Default/Site Characteristics Database/LOG.old
  • QuantisUI.exe.WebView2/EBWebView/Default/Site Characteristics Database/MANIFEST-000001
  • QuantisUI.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/000003.log
  • QuantisUI.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/CURRENT
  • QuantisUI.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG
  • QuantisUI.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/LOG.old
  • QuantisUI.exe.WebView2/EBWebView/Default/Sync Data/LevelDB/MANIFEST-000001
  • QuantisUI.exe.WebView2/EBWebView/Default/Top Sites
  • QuantisUI.exe.WebView2/EBWebView/Default/Visited Links
  • QuantisUI.exe.WebView2/EBWebView/Default/Web Data
  • QuantisUI.exe.WebView2/EBWebView/Default/heavy_ad_intervention_opt_out.db
  • QuantisUI.exe.WebView2/EBWebView/Default/shared_proto_db/000003.log
  • QuantisUI.exe.WebView2/EBWebView/Default/shared_proto_db/CURRENT
  • QuantisUI.exe.WebView2/EBWebView/Default/shared_proto_db/LOG
  • QuantisUI.exe.WebView2/EBWebView/Default/shared_proto_db/LOG.old
  • QuantisUI.exe.WebView2/EBWebView/Default/shared_proto_db/MANIFEST-000001
  • QuantisUI.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/000003.log
  • QuantisUI.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/CURRENT
  • QuantisUI.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG
  • QuantisUI.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/LOG.old
  • QuantisUI.exe.WebView2/EBWebView/Default/shared_proto_db/metadata/MANIFEST-000001
  • QuantisUI.exe.WebView2/EBWebView/GrShaderCache/data_0
  • QuantisUI.exe.WebView2/EBWebView/GrShaderCache/data_1
  • QuantisUI.exe.WebView2/EBWebView/GrShaderCache/data_2
  • QuantisUI.exe.WebView2/EBWebView/GrShaderCache/data_3
  • QuantisUI.exe.WebView2/EBWebView/GrShaderCache/f_000001
  • QuantisUI.exe.WebView2/EBWebView/GrShaderCache/f_000002
  • QuantisUI.exe.WebView2/EBWebView/GrShaderCache/index
  • QuantisUI.exe.WebView2/EBWebView/GraphiteDawnCache/data_0
  • QuantisUI.exe.WebView2/EBWebView/GraphiteDawnCache/data_1
  • QuantisUI.exe.WebView2/EBWebView/GraphiteDawnCache/data_2
  • QuantisUI.exe.WebView2/EBWebView/GraphiteDawnCache/data_3
  • QuantisUI.exe.WebView2/EBWebView/GraphiteDawnCache/index
  • QuantisUI.exe.WebView2/EBWebView/Last Version
  • QuantisUI.exe.WebView2/EBWebView/Local State
  • QuantisUI.exe.WebView2/EBWebView/ShaderCache/data_0
  • QuantisUI.exe.WebView2/EBWebView/ShaderCache/data_1
  • QuantisUI.exe.WebView2/EBWebView/ShaderCache/data_2
  • QuantisUI.exe.WebView2/EBWebView/ShaderCache/data_3
  • QuantisUI.exe.WebView2/EBWebView/ShaderCache/index
  • QuantisUI.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings
  • QuantisUI.exe.WebView2/EBWebView/SmartScreen/RemoteData/edgeSettings_2.0-0
  • QuantisUI.exe.WebView2/EBWebView/Variations
  • QuantisUI.runtimeconfig.json
  • bin/Monaco/index.html
    .html .js polyglot
  • bin/Monaco/vs/base/worker/workerMain.js
    .js
  • bin/Monaco/vs/basic-languages/lua/lua.js
  • bin/Monaco/vs/editor/editor.main.css
  • bin/Monaco/vs/editor/editor.main.js
    .js
  • bin/Monaco/vs/editor/editor.main.nls.de.js
  • bin/Monaco/vs/editor/editor.main.nls.es.js
  • bin/Monaco/vs/editor/editor.main.nls.fr.js
  • bin/Monaco/vs/editor/editor.main.nls.it.js
  • bin/Monaco/vs/editor/editor.main.nls.ja.js
  • bin/Monaco/vs/editor/editor.main.nls.js
  • bin/Monaco/vs/editor/editor.main.nls.ko.js
  • bin/Monaco/vs/editor/editor.main.nls.ru.js
  • bin/Monaco/vs/editor/editor.main.nls.zh-cn.js
  • bin/Monaco/vs/editor/editor.main.nls.zh-tw.js
  • bin/Monaco/vs/loader.js
    .js
  • bin/editor.lua
  • libcrypto-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    680b5c239d82da8e527bf24b921948fd


    Headers

    Imports

    Exports

    Sections

  • libssl-3-x64.dll
    .dll windows:6 windows x64 arch:x64

    b14ebe784f458189a17382fee793f658


    Headers

    Imports

    Exports

    Sections

  • runtimes/win-arm64/native/WebView2Loader.dll
  • runtimes/win-x64/native/WebView2Loader.dll
    .dll windows:10 windows x64 arch:x64

    f6946d311bccc86e2042a388e375de41


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • runtimes/win-x86/native/WebView2Loader.dll
    .dll windows:10 windows x86 arch:x86

    72229ff546c74d09d9030ca49ce61b31


    Code Sign

    Headers

    Imports

    Exports

    Sections

  • workspace/.tests/appendfile.txt
  • workspace/.tests/getcustomasset.txt
  • workspace/.tests/isfile.txt
  • workspace/.tests/listfiles/test_1.txt
  • workspace/.tests/listfiles/test_2.txt
  • workspace/.tests/loadfile.txt
  • workspace/.tests/readfile.txt
  • workspace/.tests/writefile
  • workspace/.tests/writefile.txt
  • xxhash.dll
    .dll windows:6 windows x64 arch:x64

    fba6b233846a2ea5e6907e23b2de9a26


    Headers

    Imports

    Exports

    Sections

  • zstd.dll
    .dll windows:6 windows x64 arch:x64

    f32e8587cacdf9095c309b87f2877ebb


    Headers

    Imports

    Exports

    Sections