Resubmissions

28/01/2025, 18:24

250128-w13v6szqgm

22/01/2025, 19:29

250122-x68jaasmdp10

General

  • Target
    Qu1cksc0pe-master.zip
  • Size 14.8MB
  • Sample250122-x68jaasmdp
  • SHA256 94cf07c8355ae5bf81fcb8e064b1423af657c216318b25c2938bfa03832c45c9
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Detected Mount Locker ransomware 1 IoCs
  • Detects Zeppelin payload 1 IoCs
  • MassLogger log file 1 IoCs

    Detects a log file produced by MassLogger.

  • Masslogger family
  • Mountlocker family
  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • Zeppelin family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • Qu1cksc0pe-master.zip
    .zip 14.8MB
  • Qu1cksc0pe-master/.animations/emulate.gif
    .gif 13.1MB
  • Qu1cksc0pe-master/.dockerignore
    22B
  • Qu1cksc0pe-master/.github/FUNDING.yml
    83B
  • Qu1cksc0pe-master/.gitignore
    3KB
  • Qu1cksc0pe-master/Dockerfile
    684B
  • Qu1cksc0pe-master/LICENSE
    34KB
  • Qu1cksc0pe-master/Modules/VTwrapper.py
    .py .sh 10KB
  • Qu1cksc0pe-master/Modules/__init__.py
    36B
  • Qu1cksc0pe-master/Modules/andro_familydetect.py
    .py .sh 7KB
  • Qu1cksc0pe-master/Modules/android_dynamic_analyzer.py
    .py .sh 34KB
  • Qu1cksc0pe-master/Modules/apkAnalyzer.py
    .py .sh 29KB
  • Qu1cksc0pe-master/Modules/apkSecCheck.py
    .py .sh 6KB
  • Qu1cksc0pe-master/Modules/apple_analyzer.py
    .py .sh 6KB
  • Qu1cksc0pe-master/Modules/archiveAnalyzer.py
    .py .sh 8KB
  • Qu1cksc0pe-master/Modules/banners.py
    .py .sh 7KB
  • Qu1cksc0pe-master/Modules/console.py
    .py .sh 15KB
  • Qu1cksc0pe-master/Modules/document_analyzer.py
    .py .sh 49KB
  • Qu1cksc0pe-master/Modules/domainCatcher.py
    .py .sh 3KB
  • Qu1cksc0pe-master/Modules/email_analyzer.py
    .py .sh 7KB
  • Qu1cksc0pe-master/Modules/emulator.py
    .py .sh 3KB
  • Qu1cksc0pe-master/Modules/go_binary_parser.py
    2KB
  • Qu1cksc0pe-master/Modules/hashScanner.py
    .py .sh 13KB
  • Qu1cksc0pe-master/Modules/installer.sh
    .sh 3KB
  • Qu1cksc0pe-master/Modules/languageDetect.py
    .py .sh 4KB
  • Qu1cksc0pe-master/Modules/linux_dynamic_analyzer.py
    12KB
  • Qu1cksc0pe-master/Modules/linux_static_analyzer.py
    15KB
  • Qu1cksc0pe-master/Modules/mitre.py
    .py .sh 5KB
  • Qu1cksc0pe-master/Modules/packerAnalyzer.py
    .py .sh 5KB
  • Qu1cksc0pe-master/Modules/pcap_analyzer.py
    .py .sh 9KB
  • Qu1cksc0pe-master/Modules/powershell_analyzer.py
    .py .sh 14KB
  • Qu1cksc0pe-master/Modules/resourceChecker.py
    .py .sh 29KB
  • Qu1cksc0pe-master/Modules/sigChecker.py
    .py .sh 9KB
  • Qu1cksc0pe-master/Modules/utils.py
    2KB
  • Qu1cksc0pe-master/Modules/windows_dynamic_analyzer.py
    18KB
  • Qu1cksc0pe-master/Modules/windows_process_reader.py
    2KB
  • Qu1cksc0pe-master/Modules/windows_static_analyzer.py
    .py .sh 34KB
  • Qu1cksc0pe-master/README.md
    10KB
  • Qu1cksc0pe-master/Systems/Android/FridaScripts/sc0pe_android_enumeration.js
    .js 1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/MALW_Mailers.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/adfraud.yara
    275B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/advobfuscator.yara
    429B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/adware-adpath.yara
    342B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/adware-assd.yara
    137B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/adware-snake_recipes.yara
    685B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/adware_detect.yara
    417B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/adwarech_ccm.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/adwo_adware.yara
    406B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/agent_variant.yara
    417B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/airpush-adware.yara
    451B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/airpush_adware.yara
    449B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/airpush_rocking.yara
    216B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/amtrckr.yara
    23KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/andr_spynote.yara
    685B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/android-buhsam.yara
    865B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/android-cerberus.yara
    541B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/android-coinhive.yara
    400B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/android-spywaller.yara
    683B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/android_banker_tordow.yara
    844B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/android_bankosy.yara
    537B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/android_pegasus.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/androrat.yara
    282B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/anti_debugging.yara
    274B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/anti_reversing.yara
    677B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/anubis-variant.yara
    543B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/anubis_v3.yara
    362B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/appdome_obfuscator.yara
    532B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/auto-whatsapp-responder.yara
    303B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/backdoor.yara
    445B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/bangcle-packer.yara
    387B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/bangcle-packer1.yara
    259B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/bankbot1.yara
    626B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/bankbot2.yara
    307B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/bankbot3.yara
    218B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/bankbot4.yara
    135B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/bankbot5.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/bankbot6.yara
    564B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/bankbot_overlaytrojan.yara
    2KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/banker-anubis.yara
    359B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/banker.yara
    446B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/banker_blackrock.yara
    348B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/banker_cosmetiq.yara
    669B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/banker_gugi.yara
    601B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/banker_redalert.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/bankingapps.yara
    272B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/btc-eth-address_detection.yara
    249B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/chrome-trojan.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/cloudsota.yara
    458B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/coudw.yara
    530B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/cryptowallets.yara
    251B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/dexguard_apkid.yara
    646B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/dexguard_detect.yara
    357B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/dresscode_trojan.yara
    570B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/fake-cleaner.yara
    360B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/fake_avg.yara
    771B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/fake_german_bankingapps.yara
    2KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/fakecop_smsFraud.yara
    462B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/fakeinst-certs.yara
    675B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/fakeinst-offers_xmls.yara
    542B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/fakeinst.yara
    260B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/fakeinst_domains.yara
    479B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/fakeinst_v2.yara
    310B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/fakeinst_v3.yara
    296B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/fakeinst_v4.yara
    288B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/frida-detection.yara
    497B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/hackingteam.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/itau_banker-trojan.yara
    549B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/java_native_interface.yara
    917B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/joker-malware.yara
    388B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/kazachstan.yara
    352B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/kemoge.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/legu-packer.yara
    280B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/libyan_scorpions.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/location.yara
    494B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/lotsofads.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/malware_banker_sec.yara
    372B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/marcher-obfuscated.yara
    651B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/mazain_banker.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/mazainrule.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/misusing_accessibility.yara
    783B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/mobidash-adware_installer.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/mopub_aggr_adware.yara
    559B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/native-code.yara
    360B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/phonecaller.yara
    196B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/pytm_sdk_tracker.yara
    173B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/ransomware1.yara
    305B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/razorpay_tracker.yara
    170B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/russian_playstore-phishing.yara
    441B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/saveme-spyware.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/simp-locker.yara
    691B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/sms-sender.yara
    382B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/sms-thief.yara
    822B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/spyware-sms.yara
    365B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/spyware_libraries.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/telerat.yara
    356B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/tiktok-malware.yara
    478B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/towelhacking_ransom.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/trojan-anubis.yara
    375B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/trojan-anubis_variant.yara
    447B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/trojan-banker_marcher.yara
    1KB
  • Qu1cksc0pe-master/Systems/Android/YaraRules/trojan-cajino.yara
    434B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/trojan-eventbot.yara
    663B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/trojan_smsboxer.yara
    562B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/trojansms.yara
    358B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/vikingbotnet.yara
    561B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/virbox_packer_detection.yara
    244B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/wormhole.yara
    738B
  • Qu1cksc0pe-master/Systems/Android/YaraRules/xmrig-detection.yara
    345B
  • Qu1cksc0pe-master/Systems/Android/blacklist_patterns.txt
    530B
  • Qu1cksc0pe-master/Systems/Android/detections.json
    20KB
  • Qu1cksc0pe-master/Systems/Android/family.json
    2KB
  • Qu1cksc0pe-master/Systems/Android/libScanner.conf
    97B
  • Qu1cksc0pe-master/Systems/Android/perms.json
    6KB
  • Qu1cksc0pe-master/Systems/Linux/FridaScripts/sc0pe_linux_dynamic.js
    .js 609B
  • Qu1cksc0pe-master/Systems/Linux/YaraRules_Linux/Linux.Virus.Vit.yara
    1KB
  • Qu1cksc0pe-master/Systems/Linux/YaraRules_Linux/MALW_Mirai_Satori_ELF.yara
    1KB
  • Qu1cksc0pe-master/Systems/Linux/YaraRules_Linux/crime_mirai.yara
    6KB
  • Qu1cksc0pe-master/Systems/Linux/YaraRules_Linux/custom_mirai_mx.yara
    8KB
  • Qu1cksc0pe-master/Systems/Linux/YaraRules_Linux/gen_gobfuscate.yar
    816B
  • Qu1cksc0pe-master/Systems/Linux/linux.conf
    57B
  • Qu1cksc0pe-master/Systems/Linux/linux_func_categories.json
    12KB
  • Qu1cksc0pe-master/Systems/Linux/linux_trace_list.json
    579B
  • Qu1cksc0pe-master/Systems/Multiple/Packer_Rules/packer.yara
    601KB
  • Qu1cksc0pe-master/Systems/Multiple/Packer_Rules/packer_compiler_signatures.yara
    21KB
  • Qu1cksc0pe-master/Systems/Multiple/Packer_Rules/peid.yara
    2.7MB
  • Qu1cksc0pe-master/Systems/Multiple/Packer_Rules/peid_to_remove.yara
    520KB
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/CVE-2017-11882.yara
    2KB
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/MALWARE_Emotet_OneNote_Delivery_vbs_Mar23.yara
    2KB
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/MALWARE_OneNote_Delivery_Jan23.yara
    2KB
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/Maldoc_Suspicious_OLE_target.yara
    714B
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/Maldoc_UserForm.yara
    606B
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/Maldoc_VBA_macro_code.yara
    775B
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/Maldoc_malrtf_ole2link.yara
    1KB
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/OneNote_EmbeddedFiles_NoPictures.yara
    1KB
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/QakBot_OneNote_Loader.yara
    1KB
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/Suspicious_Macro_Presence.yara
    891B
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/gen_rtf_malver_objects.yara
    2KB
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/gen_susp_office_dropper.yara
    4KB
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/indicator_office.yar
    41KB
  • Qu1cksc0pe-master/Systems/Multiple/YaraRules_Multiple/pump_and_dump.yara
    2KB
  • Qu1cksc0pe-master/Systems/Multiple/blacklist_domains.txt
    2KB
  • Qu1cksc0pe-master/Systems/Multiple/file_sigs.json
    1KB
  • Qu1cksc0pe-master/Systems/Multiple/golang_categories.json
    4KB
  • Qu1cksc0pe-master/Systems/Multiple/ja3_fingerprints.lst
    3KB
  • Qu1cksc0pe-master/Systems/Multiple/malicious_html_codes.json
    2KB
  • Qu1cksc0pe-master/Systems/Multiple/malicious_rtf_codes.json
    2KB
  • Qu1cksc0pe-master/Systems/Multiple/multiple.conf
    63B
  • Qu1cksc0pe-master/Systems/Multiple/special_artifact_patterns.json
    978B
  • Qu1cksc0pe-master/Systems/Multiple/whitelist_domains.txt
    1KB
  • Qu1cksc0pe-master/Systems/OSX/osx_sym_categories.json
    1KB
  • Qu1cksc0pe-master/Systems/Windows/FridaScripts/sc0pe_windows_dynamic.js
    .js 949B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/APT_APT1.yara
    31KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/APT_RedLeaves.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/APT_Stuxnet.yara
    9KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/CAPE_AgentTesla.yara
    4KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/CAPE_AsyncRat.yara
    672B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/CAPE_CobaltStrikeBeacon.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/CAPE_Emotet.yara
    3KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/CAPE_GetTickCountAntiVM.yara
    804B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/CAPE_Ryuk.yara
    480B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/CAPE_SingleStepAntiHook.yara
    306B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/ClamAV_Emotet_String_Aggregrate.yara
    84KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/Embedded_PE.yara
    508B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/Hunting_Rule_ShikataGaNai.yara
    2KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/IQY_File_With_Suspicious_URL.yara
    3KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/MALW_Surtr.yara
    2KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/MALW_cobaltstrike.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/MINER_Monero.yara
    2KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/RAT_Ratdecoders.yara
    15KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/STEALER_Lokibot.yara
    8KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/STEALER_credstealer.yara
    798B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/TOOLKIT_Redteam_Tools_by_GUID.yara
    141KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/TOOLKIT_Solarwinds_credential_stealer.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/WIN32_MALWR_POSSIBLE_EMOTET_07_20.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/Win32.Trojan.CaddyWiper.yara
    5KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/Win32.Trojan.Dridex.yara
    3KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/Win32.Trojan.Emotet.yara
    10KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/Win32.Trojan.HermeticWiper.yara
    2KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/Win32.Trojan.IsaacWiper.yara
    5KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/Win32.Trojan.TrickBot.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/antidebug_antivm.yara
    47KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/bumblebeeloader.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/bumblebeeloader1.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/capabilities.yara
    24KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/crypto_signatures.yara
    76KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/detection.yara
    .js 367KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/dotnet_hidden_executables_detect.yara
    983B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/gen_gobfuscate.yar
    816B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/image.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/mal_msil_typhon_logger.yara
    1023B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/msil_mal_niximports_loader.yara
    789B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/msil_susp_obf_antidump.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/msil_susp_obf_xorstringsnet.yara
    443B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/msil_suspicious_use_of_strreverse.yara
    852B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/rusty_stealer.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/sfx_pdb_winrar_restrict.yara
    2KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/shellcode.yara
    491B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/urls.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/win.lumma_auto.yar
    8KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/win_Eternity.yara
    656B
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/win_amadey_a9f4.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/win_aurora_stealer_a_706a.yara
    3KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/win_colibriloader_unpacked.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/win_isfb_auto.yara
    .ps1 88KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/win_modern_loader_v1_01_1edf.yara
    2KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/win_phorpiex_a_84fc.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/win_qakbot_malped.yara
    12KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/win_stealc_w0.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/win_strelastealer.yara
    1KB
  • Qu1cksc0pe-master/Systems/Windows/YaraRules_Windows/win_xwormmm_s1_6f74.yara
    2KB
  • Qu1cksc0pe-master/Systems/Windows/dnlib.dll
    .dll 1.1MB
  • Qu1cksc0pe-master/Systems/Windows/dotnet_blacklisted_methods.txt
    532B
  • Qu1cksc0pe-master/Systems/Windows/dotnet_malware_patterns.json
    8KB
  • Qu1cksc0pe-master/Systems/Windows/mitre_for_windows.json
    6KB
  • Qu1cksc0pe-master/Systems/Windows/powershell_code_patterns.json
    1KB
  • Qu1cksc0pe-master/Systems/Windows/suspicious_registry_keys.txt
    1KB
  • Qu1cksc0pe-master/Systems/Windows/windows.conf
    119B
  • Qu1cksc0pe-master/Systems/Windows/windows_api_categories.json
    42KB
  • Qu1cksc0pe-master/Systems/Windows/windows_api_trace_list.txt
    631B
  • Qu1cksc0pe-master/Systems/Windows/windows_debug_signatures
    264KB
  • Qu1cksc0pe-master/qu1cksc0pe.py
    .py .sh 16KB
  • Qu1cksc0pe-master/requirements.txt
    306B
  • Qu1cksc0pe-master/setup.ps1
    .ps1 6KB
  • Qu1cksc0pe-master/setup.sh
    .sh 3KB

Qu1cksc0pe-master.zip

  • SHA256 94cf07c8355ae5bf81fcb8e064b1423af657c216318b25c2938bfa03832c45c9
  • MD5 SHA1 SHA512 SSDEEP