8d9fcaf31a9ee8b0ff337bb8ff6235d25faa46106484acb1ef9f8285fa68b5f4

Sharing

Copy URL Twitter E-mail

General

Target
Quantum Base(2).rar
Size 20.8MB
Sample260625-sfar4scx4w
SHA256 8d9fcaf31a9ee8b0ff337bb8ff6235d25faa46106484acb1ef9f8285fa68b5f4
MD5 f47880990a75dc669945a1586034124d
SHA1 24f44f93c4400f0da2dedc3cc82fce1ea7c1d04b
SHA512 66b0c62a565e2ebf9ba0554d895f6929defb93190b7f8623e0355ac130da336c44f6af90cb39848c10b4893bcfe3a1ec4bade00da07e8a240efdfc7541a6f7ce
SSDEEP 393216:22Gg87/oLSU8M0Cu/QWZBEG6OVFYGuB5QRhgz8U3hohwl/HCuX89ZgZxcHs:22yY65Cu/Q9G5VFYTggzLmwl/HS92Zxx
TLSH
T1C52733DF48F106BA64CFB5801546E2EDB6AF0A50E47CC8F965B1B33BD98D24489B2371
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

Malware Config

Targets

- Target
  Quantum Base(2).rar
- Size 20.8MB
- SHA256 8d9fcaf31a9ee8b0ff337bb8ff6235d25faa46106484acb1ef9f8285fa68b5f4
- MD5 f47880990a75dc669945a1586034124d
- SHA1 24f44f93c4400f0da2dedc3cc82fce1ea7c1d04b
- SHA512 66b0c62a565e2ebf9ba0554d895f6929defb93190b7f8623e0355ac130da336c44f6af90cb39848c10b4893bcfe3a1ec4bade00da07e8a240efdfc7541a6f7ce
- SSDEEP 393216:22Gg87/oLSU8M0Cu/QWZBEG6OVFYGuB5QRhgz8U3hohwl/HCuX89ZgZxcHs:22yY65Cu/Q9G5VFYTggzLmwl/HS92Zxx
- TLSH
  T1C52733DF48F106BA64CFB5801546E2EDB6AF0A50E47CC8F965B1B33BD98D24489B2371
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  Quantum Base/Quantum Base/Core/Utilitys/auth.hpp
- Size 2KB
- SHA256 495d8ff95ff56ac53a81da86a24584e38ddd9e8090b827922e3236682470cc3b
- MD5 2cbbc831d460f48c1208bc058666bab6
- SHA1 6378baefd9b87c4dcf921533ec4beed4ef876245
- SHA512 0e75b99b0ed0492aad405aaed8893b3287825d75535084a8ba94ff2cf37bb2788357415cb54ea01e996132ca3deac8521fe5022c75d6bb27ee44caf7016814c2
- TLSH
  T19351975B35FEFE105E61E1A18AF04943E498B841537A43F3F4EB206CB53152397F8AA6
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral3 behavioral4
- Target
  Quantum Base/Quantum Base/Core/Utilitys/json.hpp
- Size 707KB
- SHA256 58cc59349445027ddda1f1a464ae04d287c22a4c7e928463605000b3cc4c7a0e
- MD5 2a6e37755ce123048f57899ac7ea9e95
- SHA1 cc810904e8eaa13fa8ad710a3bb80d0ad3f1aa45
- SHA512 78ba02b2239f05ebc26d1504a690ad22a42a938bc37239b26c13dc7b668d6a36c07dec3ba83c1e94cb3443146752ed06f644b5889b810e0b963e3fe3af52b859
- SSDEEP 12288:a/sakmz+k8pVZroyiCmH05zFATrAN8VA/BlQCIBoPQVYm37WI+P:a/saX+k8pVZroyiCmH05zFATrAN8VAlT
- TLSH
  T1D2F453685CE3A49147337779AA528C06FF04561397940BEAB9DCCAA05F32401D3BBFAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral5 behavioral6
- Target
  Quantum Base/Quantum Base/Core/Utilitys/library_x64.lib
- Size 19.8MB
- SHA256 2986482ece8f3a1a7319ddf6fbf1d209de3f785a77696003762f8b4717cb6cae
- MD5 dbc44e56d09c29b6c09778d3d2a41d70
- SHA1 5da7982e0022711bbc97eb67b41498d22e30ba52
- SHA512 64d8f05ee73ee041a10a8377de8c075e54c1ecc1491ee657b63af4fe382b59bed9b16967b284e2780528a269e362b2b14fec8bf34dceacb2ca54e6d7d7ddf29f
- SSDEEP 196608:UGG/1kR9GDiKOM5YS21X2IMuu0wS6bULjRBhAPiP6/8zUEt+5BInUDQMsqSrSD4i:UWqchRx9cfJoPLE
- TLSH
  T11F274C15A95DDE13FA124938A2AB472DA39CFE47BB955383D2948712ACC3344BF7F090
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral7 behavioral8
- Target
  Quantum Base/Quantum Base/Core/Utilitys/skStr.h
- Size 2KB
- SHA256 7244da9f5ebbfd9ec18a303310e26ebe3f357c97aab2c4acdd2b29caa54996f9
- MD5 7c31fadb28db45ac8e606ec4aab1d5d3
- SHA1 861bd981046822feb9007c6c756a1d7b69422b39
- SHA512 aca605584411bd0b2c1d140a6fbad3847727ba722814353787a919baff5366fa8a230698f2d3871471bdbf28e6094e6297f8870c0348c7997988e95e08a393b2
- TLSH
  T13741E38F363BD48507F012A67230D814DE2DF912EA1D46B67997433AA0670419339FED
- MD5 SHA1 SHA512 TLSH
Score

3^/10
behavioral10 behavioral9
- Target
  Quantum Base/Quantum Base/Core/Utilitys/utils.hpp
- Size 1KB
- SHA256 ee3c2d7599602d99c196401105ade2b030ccf1837f4308c3e0486b3fb415b006
- MD5 11355a4b2033dcd901a700ad3a3d7d35
- SHA1 5db74443c6757bb812b51cf081b4f9b4619d52ee
- SHA512 9cf8aad58096a4c31d2bd11e11f0694bbe7b90739f345db7d99360915bb69f7cc3f0bb90f885313de855228fd088ac0cdb26bbc0be10fb9d443ea93e1a8ace72
- TLSH
  T11411AA81B8BE7B4A87D922E6127410076868BDD08BB603F8D6EB10E4B44411C81FB1AC
- MD5 SHA1 SHA512 TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral11 behavioral12
- Target
  Quantum Base/Quantum Base/Core/cheat/Config/CONFIG_MANAGER.h
- Size 7KB
- SHA256 a2f8758bf46b3051de4ceb64ac3d793a796b20f4b352b07ce5f9d5a410e6e172
- MD5 bfcb39670c26ae7ac2b414fb128f24ce
- SHA1 86925165195a63131868ad2d3be2f6c011624e59
- SHA512 198d5510cda5c2391ef31de5ba810503f7bd0e398e842abe3b4856a4ab3c94f67f0677d10113a7128267d03f01b8d345dce8e02cc4386f7491dd47075dbe76b4
- SSDEEP 96:GZLp7FJ2yq3mqzFOXatgM+1fUmpq+2q2xKRoxhjJRqwBl:4l7ecz1fUmp6iozjJRqy
- TLSH
  T15CF1DD5A613936BF4533AB75CE474355F74A2193227843307ABF09582FF84C062A9AFE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

8^/10

adware persistence ransomware spyware
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Enumerates connected drives
  Attempts to read the root path of hard drives other than the default C: drive.
behavioral13 behavioral14
- Target
  Quantum Base/Quantum Base/Core/cheat/Config/config.h
- Size 34KB
- SHA256 db05a82c1d0b438a470ae9fe3aae440eec29b1d64bde93ed7ba6e51fdc565d99
- MD5 2673aa31539ebb0734a4341974efafa4
- SHA1 709633add5d9506bc801359317901835b3144fd9
- SHA512 b8740521c0e8b56ce4defa6789dc132e5fc9f624456c227dfa96e008f2d7a1988e121580573f1213c85c234a0796ae06996578a46ed50398756029925ef1c528
- SSDEEP 768:K86ooOtDUL65bFhhXugWc9Z1pUIejkxwLcOwT6WltE+mp:R6wtILaujkDrmp
- TLSH
  T1EEF2CB54966522BF0833577DCE979781FB13982750B1C375BEAF89082FF88904264EF9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral15 behavioral16
- Target
  Quantum Base/Quantum Base/Core/cheat/Config/nlohmann/json.hpp
- Size 717KB
- SHA256 528c6c3f16e717e0e64b6dc78e6e39b1f107c934bcaa1c0a494d8df1afb34604
- MD5 7de2129dc8f52954c4cec27dbb9cdd47
- SHA1 b531da17ba092aab209c89fb0745b32ccda214ad
- SHA512 d379a6632501daff2787a344fd3e94a39b5afde1614970a46e7a3d3b26669bb4dce3bbbb234f71d6101a29e3cb50a8d059035380b4a0587823a8302b5a82c8c4
- SSDEEP 12288:6xsXWWjuEO5ljryEUHg3sUpFEx9wlgXgfplUwSBoPQFw237mY+e:6xsXhuEO5ljryEUHg3sUpFEx9wlgXqlg
- TLSH
  T1ADF4636C5CE3A45147337779AA528806FF05562387940BE6FADD8AE05F3240093BBFAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral17 behavioral18
- Target
  Quantum Base/Quantum Base/Core/cheat/Engine/offsets.hpp
- Size 5KB
- SHA256 ed776e6af623d345d58256e81710b5c30b0a8b68a3b5f1f9913d1e0155cbeae7
- MD5 902e76cf2edf98f465303a600005c9f5
- SHA1 c6db4e7f26144688df28767bbf91f7ef14256463
- SHA512 7a4d612d0d3b1dc9452dd3d9cdbf82ada3d3994a9755cf481dc250436ca51856658b9cb158b52af6eb6cd5fea1db09a5ca9162f6c2e9af6503da9bcaf75c57d4
- SSDEEP 96:7CvrXMaNMUQ/bA2HLTtJcgfjZGkeoOjd6FhKraDwb8myJZ:7CvrXxdQ/bA2HLzLrZGkeoOjMFhKraDv
- TLSH
  T1E5B1525E121A40063DA653B3BE283A63F8A2127347D84A02FD6EC1F06F25D5C7F7572A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral19 behavioral20
- Target
  Quantum Base/Quantum Base/Core/cheat/Engine/sdk.h
- Size 17KB
- SHA256 8d38c324ea897ce1f62697919675b7fda68b0727fba48818ca356cf76eecaaf2
- MD5 ab68ed1d7560d147fc1d28f9e43cf56a
- SHA1 4b60e72d1d8f9cdde89adc7c1b2a352af19ec19b
- SHA512 98e103404cf0919d553a331242cdd6f78940c328fe8ad1f5e9c1fa7a287a381722cfdb3fbacfef693d1c76447b676e2a95abd34f4d0ce5ef738fd1af79da2e7b
- SSDEEP 384:GXhUFwBOIufsqqwN4qkkQrq5S7iNqap9L:NO9SL
- TLSH
  T1A88296CC011655025DF3266EEFBA754AE69E74F30C62125ABD6CC0B43F7908C46B1AEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral21 behavioral22
- Target
  Quantum Base/Quantum Base/Core/cheat/Exploits/exploits.h
- Size 4KB
- SHA256 07da0f06c267b9ec2a20fdaf47949dd3686f11744e86f94ad22edfcb0b4ffe6c
- MD5 e1821cfc4dc733a23c9a6eab3a65de9f
- SHA1 56e92b50a3316be951e29e95d8ef38e4288839fb
- SHA512 611f6b2bf7aa082bbe7f71c972d0b7ab2a7697bb3989286ac7df08e91cfdb8aac0fa4da403ace885892fadc34d981b64286aadb3ce28609577cba0ee7abb9d98
- SSDEEP 48:6s1bJkn+k2uhZAkyUIYTeSzGzUdGRj5bIovGdR/:6s11kniuhukyQFzGId858ovGdR/
- TLSH
  T150A16F8E5567001109BB277DDDA76909FB6AA0B344642320BC9EC1DC2FBD4984A79FF8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral23 behavioral24
- Target
  Quantum Base/Quantum Base/Core/cheat/Renderer/ImGui/imconfig.h
- Size 296B
- SHA256 9f99f3f17b91fe53db74b8321264c51714e472ff0e3e5ca616c3afa3286fd388
- MD5 99da00f2a6c5dceef950513221b71213
- SHA1 d41d480056aebbcd0249107232680e83486fa78c
- SHA512 20ec0e314aca6cc463e6f860eb5e828798d5c47bf63a613aa413b0d7e1aa5567ac096751b01e5bb23b3b8e94f54f0d41fff93acbf063a992a23bc677a1af453b
- MD5 SHA1 SHA512
Score

3^/10
behavioral25 behavioral26
- Target
  Quantum Base/Quantum Base/Core/cheat/Renderer/ImGui/imgui.cpp
- Size 560KB
- SHA256 98ff1bb1e51cb17a5312dd3a160854f5cf3a1f7f202e2b0a41bb7b42e5b90a34
- MD5 09f9fe418b6789e70a07b63a35968f0b
- SHA1 0593ac8049dca66a5bec752309b70c1f253f4352
- SHA512 d33459ace5ef34d9629c4eb38f587df53297c3a32d5f652d666691fd2c231f82019dfa1d90220c45c506214eb7d313970530bdb8915c382b62a64e40fc906fbf
- SSDEEP 12288:cGNl3tUSicildlVdicRYFAkUxvLKkpsC7XSEI4SmzmVXhMHckuY:kS6
- TLSH
  T155C476EE106375179B31A92D5BC35705EB2A09339AE046147B9C234CBFB442386B5EEF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral27 behavioral28
- Target
  Quantum Base/Quantum Base/Core/cheat/Renderer/ImGui/imgui.h
- Size 128KB
- SHA256 aa40d4047ec8c1ab06d32af8949387b77dedd84a20e1f270d1f8f6afeff4f2b3
- MD5 fcab5ad1e65ede85ad5a73768a7fb026
- SHA1 8395311cbaaa45c1fca23374eee112738427f79f
- SHA512 91ed86bcf72a7256adf8b223596aad7e56a5de740a3d723609b87ef9ad325981e2dda790b3919d246db602f56fcb0ba31a7e8c8e78dddbfafebc66176fca255d
- SSDEEP 768:NOzgOxYxFh+uTmk7k53+MbgZqUtYfgLzHmFWgA/ERA63pLTDfeXFRWmbfVyMYBAH:ux5TbahmfK/bfEMYw43mpP/cQZ3TL
- TLSH
  T17DD3128B02067511DF319651A9A2CC49DB2C1933FFD09BA0736E739C9F728164A71EAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral29 behavioral30
- Target
  Quantum Base/Quantum Base/Core/cheat/Renderer/ImGui/imgui_demo.cpp
- Size 439KB
- SHA256 c14762594fe5a5c3c13b338f8d8be1b68e896278ea2cf767e4d092bf43f78512
- MD5 8ebfcad3a5d546365650c31ad1154d2b
- SHA1 1ae37467b21b144788ba766911725a42c998bdf2
- SHA512 310f9ef3c43f74baa59d19e898f62c43e597ede6de60538121f46d29a05af48dc764217685f91f637eb848791afb02205599ec8f4837a8b6445aec3a042819e2
- SSDEEP 12288:JifPippfLBFXS1EibhXSdjjij8cx4a3MVmvMOcSxajcPenL8Vco+vczxLMYpI8Mn:6aLBFDNa3MVmaJiB9ni
- TLSH
  T1D4A430CA16023E12D932612A6BC2C859EF790C738FD05760BB9D325E6F7845542B1EFB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

JavaScript

T1059.007

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

Boot or Logon Autostart Execution: Active Setup

Enumerates connected drives

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32