aa36951113e3910739b4d123962365edaa2d51669efbdf5d4c90227def8f5802

Target
QuantV FiveM 23-1-31.zip
Size 27.5MB
Sample260627-v1xtgscw4m
SHA256 aa36951113e3910739b4d123962365edaa2d51669efbdf5d4c90227def8f5802
MD5 13861255f7627f21875f31e6e1471712
SHA1 dac5d9e848febad88d21e2c2e859e90cc966ac92
SHA512 148f554e34131d3479e02f36d987fbb3346a67c6dcee469d10e0f5685fffa58a53ed254f0a82dd3b3d9e23d09feaaa1978da379d1faa62e2f5c715306822da17
SSDEEP 786432:wiVGx1TeSEsP45OoX3EuRt46nKGFc0l37G3Dekv4Qe8Kiz9+Zd/M1+npWJ+YKFs9:wbTe95VUCAj99
TLSH
T1AE573376B44B3C65881BF1624AFC6D17DB013AA609368DB1FD3992897CC8ECD1716A33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Targets

- Target
  QuantV FiveM 23-1-31.zip
- Size 27.5MB
- SHA256 aa36951113e3910739b4d123962365edaa2d51669efbdf5d4c90227def8f5802
- MD5 13861255f7627f21875f31e6e1471712
- SHA1 dac5d9e848febad88d21e2c2e859e90cc966ac92
- SHA512 148f554e34131d3479e02f36d987fbb3346a67c6dcee469d10e0f5685fffa58a53ed254f0a82dd3b3d9e23d09feaaa1978da379d1faa62e2f5c715306822da17
- SSDEEP 786432:wiVGx1TeSEsP45OoX3EuRt46nKGFc0l37G3Dekv4Qe8Kiz9+Zd/M1+npWJ+YKFs9:wbTe95VUCAj99
- TLSH
  T1AE573376B44B3C65881BF1624AFC6D17DB013AA609368DB1FD3992897CC8ECD1716A33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  README.html
- Size 4KB
- SHA256 bcd9b14cd2299ebb830ade106e5713ab2c04b7c4d1429dc5d838e62c4d3b51ed
- MD5 e1c790d9f908c7ed6980452c06c62811
- SHA1 62f859917533a29000bf94bf8d856c21d43474d8
- SHA512 4484d2d1363b655e2c1cfe6cdb41b34bf6a4eea39ac616e6439d49f4af09b219cc58855d579567e11b764ef6eeb8bbba51e33f213438a7d98504d71bb6b22829
- SSDEEP 96:WFexp0CkJfAA2OaYTVAPVsD4JEAf2sD4JrQAIM1K7KEvSA0+9OFeb1:WFqp0CMxSKU/UwWFEwwOFG
- TLSH
  T1479152F352812C3B1993B7B59033FB5DE1D74181CB835696E8FF029B5385D82C45398A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

4^/10

discovery
behavioral3 behavioral4
- Target
  _Install/1._BaseMod.url
- Size 166B
- SHA256 f146b3d22759d99f5c2362caa2deec989140403ef059ffb66887a9a50537b848
- MD5 90ebe6a9951b00ddfee453d6c6fd961f
- SHA1 142182277472fd976e4334ed95b4111bb6da8984
- SHA512 d2e39fde1d7acf64666b89a256426c92915820d727ecf919a781332523d21d831eb41085fcda1c0ca10f74c6c9a6cb13877abd5acb53497912a3fa1f9f121ee5
- TLSH
  T13FC08CEBB649DAC6D266900A21B0F80CD82E72A048E2E0BD5140C9671D89899C895EB6
- MD5 SHA1 SHA512 TLSH
Score

7^/10

discovery
- Loads dropped DLL
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral5 behavioral6
- Target
  _Install/QV3_FiveM_ENB.oiv
- Size 6.6MB
- SHA256 eba0d7e4eafd3120cbad212f48da28ca451ff3a430f3c96c0a070c481993a1bf
- MD5 1b68ec87c22e8f7bff1b687ddfb47756
- SHA1 9bba57fa3a5c1abf6ddae24859b6f1b0f5ebf988
- SHA512 61ba670d94eda4eb18c49a49098e2b6f6c906969cca2c273ef8c3d6a0fd473bbfae71043c2bca525aa5c13d298d92cd23bd16cbf2f53d7ac1894771cb13cb724
- SSDEEP 196608:KnuFHMj6+7jpD1zqKnI+6AXo7WEgbcZlgpw6BLzoT+L:KWsm+7jpoyI+6soaE3ZlQsaL
- TLSH
  T17C663365E24D4523EBE3C23209D56D17D050C44189EEB88F2C94AAECDAF9FE622F5770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  _Uninstall/QuantV_ENB_Uninstall.oiv
- Size 19KB
- SHA256 f3768ca5025f6dc7c6babd2178500911bd171b47f9133f947c066edd75b99ed3
- MD5 ba921ea786f90bc4096d67306eea06d4
- SHA1 70702672db7361c1b05708035f1c812aba751db8
- SHA512 0da15de107188b1570a40f46f693ea7efe943e3b0760f361482c835d511f331975dd62cfcf0106be129395f1c4368836f184312b18169794881e009eedff6eb7
- SSDEEP 384:UPoYBmZaGX2HEYYtcpMMwnAGMqHgF8ZSPDNgReG7Z42:jYBsaA2HVZpSp7gYSZgXu2
- TLSH
  T1EC92D0036590CFB1CD2EF3FA56EF0D922849B5B04F25581668A619009A4CF0E57F1BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  optionals/ENB performance-quality presets/1._ENB_Hyper.oiv
- Size 227KB
- SHA256 d5fbb48038be11ef03ac71889556d6717b8312c3307fdb5d587b0dd2d2a39c7e
- MD5 78549102ef4af7b765325845699950cb
- SHA1 e92b51125505df1c9acc37eb2b4f49afe432daea
- SHA512 5110315328002ab80de945bb54b50b52a0fa7634e2f1ffd5f1e573c23cc604c5900037f7cfb8fe4678344d3f149ed6c075a5ded0bc9769e6b9195ac0ac66fc87
- SSDEEP 3072:DzhSpEUS8TKTKlhlbgyB07YLWwEmswNqCXDLH5UMvXl2bqXTqe9An1J0ZA0+wgvb:D/mmQB07YLWwhNvTtVcbqdZdLc
- TLSH
  T18A34D071D51F42A3C69BE13A19B6AC16F4A0E0144EC8B40B3C8465EA8FD5FE017E277E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  optionals/ENB performance-quality presets/2._ENB_Ultra.oiv
- Size 227KB
- SHA256 71420c0d22e7730d18fbd75afb89bf3dead489944c729e59b5ef2d161a9705c5
- MD5 fa2780ce3b780b1d2c70980b6674b7d9
- SHA1 9a65170f9082b149926854af6f2307e6dce5dd35
- SHA512 4897def5f73e9346edd4aa634032d89e2a20fe0d4fe6ac7f9546f093a5e2583169882998e044756e252cdc2cce3ea000fbdaa22a69d05d058947b9239d0abae9
- SSDEEP 3072:HDzhSpEUR1TK64lhli8wKcKYLKVEXswNfGXYkHRUXkpWBHqQTMe9O1dDKq2y+Xg/:j/+m3rcKYLKVaN+IQLKHqlt2y6YmI
- TLSH
  T13934E132D51F47A3C7ABE13A15B6AD17F0A0D0144EE8A40B3C8465E98FD5EE017E277A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  optionals/ENB performance-quality presets/3._ENB_VeryHigh_(default).oiv
- Size 227KB
- SHA256 b9ec228da955cef2fb539d10b7daa40ebb2f1a70744ae8d7876a46721333fb3b
- MD5 5c915235da5e22c7c0c99b9850426bec
- SHA1 e2d7dd6df795f7a8dd42727818f03b4b0b390594
- SHA512 d3c3626a4c175f45d9d8ad6db806a97937ec529e1d2c91800008e8fb4a357c145b6a5ffad6dd1ba945699f8115e2c1ea6fb357898b82081f00f0402de041729b
- SSDEEP 3072:qYzhSpEUF3TKPVlIlQWyU2FYLp1E/swN6eXl/HOUhqN9OyqjTXe9fe55IhJ8+Cgw:h/kmno2FYLp1WNX1GvEyq2h6b
- TLSH
  T1D634D172D90E4693C79BE13619B6AC16F0A0D0144DD8A40F3C8466EA8FE5FE057E277A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  optionals/ENB performance-quality presets/4._ENB_High.oiv
- Size 227KB
- SHA256 42113017ddb0fb4ba4b62d86bf1b6d36939e2128b05a4f6cee5defede0148bca
- MD5 5d6eb5be616b615b8365ae420ac6b66e
- SHA1 7b3dbc0639a7a44e82b77f1f6ab6eb29d77d7e9d
- SHA512 a6c09dfccb09d54bc01177d0a4a1828b11b99038c82b8c411a1867514b8409e2b599ebc00e128dba233481cdcb94ca89f2c32a7eb058486858347390c0816a60
- SSDEEP 3072:vbzhSpEUzQ2OXlVlro1iENYLPfENswNezXGSHfUL0eMU4qkThe9Pf4WFPeY+KgiT:z/sHMBENYLPfwNK2Qk14qjPpR
- TLSH
  T1E034D022D91F46A3C79BF13A29F6AD16F0A0D0244DDCA40B3C8465A98FD5EE053E177B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  optionals/ENB performance-quality presets/5._ENB_Medium.oiv
- Size 227KB
- SHA256 30504aacbdd186e79de0e45d3b74e15f3f1c29b6bbeb6edf74d8d33a7b02a718
- MD5 3ec6c3427c6ef218eddf80d1fc1adb0e
- SHA1 e586ae9fb7d98095e5491bf27427ec3cd444ede4
- SHA512 63006fc5a81d2be500a7def460861f5aad93f91c5290ec6b0b60a1ca1c8b9dfabb066f7c3dfa1872197f8fdd9e052f55f543006b3d874d2dc13c85f134ec931d
- SSDEEP 3072:UzhSpEU/RQ2VXlHlpqSmBcYLGMENswNC1XjsHUUzOGS66qyTJe9o9xc6GZt+hgS5:U/yHzwBcYLGMwNET1+J6qgGvo
- TLSH
  T18434D032D51E46E3C79BE13719B6AD16F0A0C0158DD8A40B3C8465EA8FD9FE017E277A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  optionals/ENB performance-quality presets/6._ENB_Low.oiv
- Size 227KB
- SHA256 76a84daa30a8ff80e981fab5ec0bd17bd06a7d7123441bcf895ba15c0ebe2500
- MD5 79799de2fcff2732b39ea92aa3a73034
- SHA1 a83471a1707cbf3b83ca1dfe643eb46e739c2000
- SHA512 107d5d71a400beb81ab884fcefdef52ff221ccaf920f9073b46c3d2491120b1aa74276b3540533a2cc1ca808473e75d4357d2b19edee7e3192d10a4e0d3925d6
- SSDEEP 3072:UzhSpEUvkylQ2ZylalGEvsv6YLFrEzswNsIrXj3HiUc289OjqyTPe92AhJ+Mlz+u:U/wk8Hyvv6YLFrmNtzSv8jqkMpB
- TLSH
  T17B34E172D90F56A3C79BE13619B6AC16F4A0D0548ED8A00B3CC465EA8FD5FE013E2779
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  optionals/ENB performance-quality presets/7._NO_ENB.oiv/7._NO_ENB.oiv
- Size 19KB
- SHA256 1c346507fc020aa5e44f993501efd87db2191271dce379527d9c862140ba0c5a
- MD5 b93ee7c1c062d1c16409565cc5d3bd6a
- SHA1 a1e89518c4d8139d592d2a94ca56d9119b2f6109
- SHA512 7821d607ae39eca253df48fa0e243c99e6d712c5747bbb737a1bfbce12aa743fc2a88f017323387730f91e4fa1b145c32c0e2d96124231892887eb65cd33cced
- SSDEEP 384:0otBmZaGX2HEYYtcpMMwnAGMqHgF8ZSPDNgReG7Z4Z:jtBsaA2HVZpSp7gYSZgXuZ
- TLSH
  T18492D0036655CBB1CD2EF3F942EE0D933849B9B08B16181578A61950564CF1AA7F2BEC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral23 behavioral24
- Target
  optionals/ENB performance-quality presets/7._NO_ENB.oiv/FiveM.app/mods/QV3_no_enb.rpf
- Size 7.7MB
- SHA256 ca56f228fd435d0fbda0c75175961dab47e3e3a08dee7a31408b9e4541a5b1e2
- MD5 9aec349cb01e1232408ac7584bdedaee
- SHA1 8a7a020dac1b3a49cb5df6132e58eb47045a6f2f
- SHA512 6773a43d33603830324323bfc5eb8cd029636d1cd334d65de4dd5a378cf604982077bd632146b1b71dd32da204e7799e0c61fb48e0e9e2135948b1154eb4b604
- SSDEEP 196608:vz3lMVXyOOfevQ4/RjIbIvInr969YG+1ClMDlcOqS9OMI8bddsL:vz1McOO2vQmhInp6nblMDlcJQ7Iod0
- TLSH
  T1038633E5493B964FE34DB37D0A6A181A635C93C4B19DF4B318EFC78911EBB2B1993204
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10
behavioral25 behavioral26
- Target
  optionals/ENB performance-quality presets/readme.txt
- Size 249B
- SHA256 6fadd17dba505f849bfc0516b9b5ac697e01aac865740d2c301bf806f1821d33
- MD5 07b8cffbacfc944a8d8371e0f558149b
- SHA1 99154e3519a9d328c697711bcc8422e49b3806a2
- SHA512 2914538ccd1fadb83d2ce75b8000ec6be4e61e395e5d2ebf83b4f8500004973ccfebb4aa7aebc453153179a38e6f489fbbbfda755d0c986c6c57a7ecc1699305
- TLSH
  T1F4D05EAFC2495336295202AA219D4493B2250E159A74C44B60FA815826D7EF24AE198B
- MD5 SHA1 SHA512 TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  optionals/Optional presets/- visual presets/QV_brighter_nights.oiv
- Size 207KB
- SHA256 72efac6470e70bc3b70ce46070c2b4de0f5599d572229c97fd2502d235051d9d
- MD5 2a2c7ff4532722a698421d3b32abce8d
- SHA1 c0b34b4742364e277b7f255c3336879b1221d30a
- SHA512 315b623e009e8ad178aa8cada0e4ac6a4f75994fc6eb14f16cd9062908ef7f9c7f55769a98fdb8416256d9113eb03363fe4ffc7dd8391ff400dc7307435c5e39
- SSDEEP 3072:3zhSpEU0YFqPZTshRHEran0b+4y+Im3bo6S6cjyMeUAOc4nBYVf4abrg:3/bYFqPZakW0b+484bxS6QFAZ4B64crg
- TLSH
  T13F24E121E65A0733D69BF77108E8AE87D051C6258AD8F40B1C94B8D64BD9BF017E7B38
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  optionals/Optional presets/- visual presets/QV_cinematic_lut.oiv
- Size 6.8MB
- SHA256 440dc78a70ac6eb8803a20b0498ecfa24974276d2f3bb9e66d5243aef9bca11a
- MD5 d467ffdbf1cc907f39facb4d3c692203
- SHA1 98d32487b8835ff185d8a63fa422bfe169f10476
- SHA512 4cbeea359863df65bba7d545a560a6e3d520a62dcf4ed4fca25c03d57814e65428bb165645aa5d073020a6428836db498ad647d2c428e2e96d5e4409a8791bac
- SSDEEP 196608:TvCZrbevcxn3PLbHmXJ7CxeFWbvvHHvX6:TvCZrbevcxn3PLbHmXJ7CxeFWbvvHHvq
- TLSH
  T1A3662336B44B3C64885BA12249BDBE5BDF013967093A4D317D29B18A7CC8E8C5735E3B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Loads dropped DLL

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32