Overview
overview
7Static
static
3Quantframe...up.exe
windows10-2004-x64
7Quantframe...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...dl.dll
windows10-2004-x64
3$PLUGINSDI...dl.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...nu.dll
windows10-2004-x64
3$PLUGINSDI...nu.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...rd.bmp
windows10-2004-x64
1$PLUGINSDI...rd.bmp
windows11-ltsc_2024-x64
1$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3Quantframe.exe
windows10-2004-x64
6Quantframe.exe
windows11-ltsc_2024-x64
6resources/...ow.mp3
windows10-2004-x64
6resources/...ow.mp3
windows11-ltsc_2024-x64
1resources/...on.mp3
windows10-2004-x64
6resources/...on.mp3
windows11-ltsc_2024-x64
1resources/...on.mp3
windows10-2004-x64
6resources/...on.mp3
windows11-ltsc_2024-x64
1resources/...or.mp3
windows10-2004-x64
6resources/...or.mp3
windows11-ltsc_2024-x64
1resources/...up.mp3
windows10-2004-x64
6resources/...up.mp3
windows11-ltsc_2024-x64
1resources/tos.md
windows10-2004-x64
3resources/tos.md
windows11-ltsc_2024-x64
3General
- Target Quantframe_1.6.25_x64-setup.exe
- Size 12.7MB
- Sample260720-l3hynsgx2w
- SHA256 fc0611604d19bcb410e46a60af0309272946f6bfa6e43a465bc16a14d09aeefb
- MD5 199dc5e74ec4f1c3314175d617753984
- SHA1 429cb04f2b4554e5dff4e6f9d7219fb111e61303
- SHA512 a6f688b1f56ab86ab35e8d01636aea0be41c6d759245e2919799e31be68f04ee58b471babd4195c3ccb8ba78e6b6dcd071368fd8bc5c304deb112bd8ab0798db
- SSDEEP 393216:dFAhp67vM7TfTKtLzrn9OLEedbbHJtjHWfrAApqekw0NjM:dFa0Q7Tkzrn98fptrwrAhjM
- TLSH T1A5D633EB6486FB61C18B8670B0B7BE8606CB3A23993D979C7214C17C25D758235B5FE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
Quantframe_1.6.25_x64-setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
Quantframe_1.6.25_x64-setup.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/NSISdl.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StartMenu.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/modern-wizard.bmp
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsis_tauri_utils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
Quantframe.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
Quantframe.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
resources/sounds/cat_meow.mp3
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
resources/sounds/cat_meow.mp3
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
resources/sounds/iphone_notification.mp3
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
resources/sounds/iphone_notification.mp3
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
resources/sounds/windows_notification.mp3
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
resources/sounds/windows_notification.mp3
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral23
Sample
resources/sounds/windows_xp_error.mp3
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
resources/sounds/windows_xp_error.mp3
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
resources/sounds/windows_xp_startup.mp3
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
resources/sounds/windows_xp_startup.mp3
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
resources/tos.md
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
resources/tos.md
Resource
win11ltsc2024-20260710-en
Malware Config
Targets
-
- Target Quantframe_1.6.25_x64-setup.exe
- Size 12.7MB
- SHA256 fc0611604d19bcb410e46a60af0309272946f6bfa6e43a465bc16a14d09aeefb
- MD5 199dc5e74ec4f1c3314175d617753984
- SHA1 429cb04f2b4554e5dff4e6f9d7219fb111e61303
- SHA512 a6f688b1f56ab86ab35e8d01636aea0be41c6d759245e2919799e31be68f04ee58b471babd4195c3ccb8ba78e6b6dcd071368fd8bc5c304deb112bd8ab0798db
- SSDEEP 393216:dFAhp67vM7TfTKtLzrn9OLEedbbHJtjHWfrAApqekw0NjM:dFa0Q7Tkzrn98fptrwrAhjM
- TLSH T1A5D633EB6486FB61C18B8670B0B7BE8606CB3A23993D979C7214C17C25D758235B5FE0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
- Target $PLUGINSDIR/NSISdl.dll
- Size 15KB
- SHA256 ddf40229dd9d6b268902d8dea88c8a04aacf1af218dd29f6dcd35babc54ac08d
- MD5 8eabbe36e8b52e69322780d0f541fd19
- SHA1 e5fa3eca8d2035e4fa006b7123c348348e4e6de4
- SHA512 4189fabff409be4bc7a8e81be58fb18e32398e4ef4c01a70cf823d79e76f47c4681734808fd61db8728c73d2bcad890b09aa09d5a0f0b0c3ad581be1beaf9ce7
- SSDEEP 384:jrSQMCOUILnCaSPy/yhJzmGSMRWyOUKie:jrSQMCOp0yamMRWysie
- TLSH T17B623C16B62084F5DBB2167034D73B3E6BB28F6A1A2848C34BF35C4E9E52307B675D85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/StartMenu.dll
- Size 7KB
- SHA256 fe330320459637d8dd2b5d84d07925c38ec264152ffd3b1760a4d44d76536caa
- MD5 b9b71990b37e04a56cadbcbfa694f30f
- SHA1 3b7627deb793446d6b12b7b94266cc592982a5c2
- SHA512 b4aa947aba471ce0ba37ab859391f6a157887c882c920a3081d482f63a83317ae75b428ebae226f835798517abb676114ee42bf13bd4c4291cebbb5e9658f2e5
- SSDEEP 96:VIt3J2Gl0eVe0+Cfo0UkXt6+o69UiGdPh5/utta/x3lkCTcaqHCI:ShE+A0+sF6piUFkA1lncviI
- TLSH T1FFF1C776F3D20673F9AB427428632F231B2AF521576581A7890316CE7A61DE3FD34B11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/System.dll
- Size 12KB
- SHA256 8b4c47c4cf5e76ec57dd5a050d5acd832a0d532ee875d7b44f6cdaf68f90d37c
- MD5 9b38a1b07a0ebc5c7e59e63346ecc2db
- SHA1 97332a2ffcf12a3e3f27e7c05213b5d7faa13735
- SHA512 26e77f8e10f6d8693c92bd036b53a3f6e0c523090ef8dfe479815f556ecd2b57fc90ce9f7cceebe70460d464decb27ad1fe240819fd56997764e96506b6a439c
- SSDEEP 192:kjHcQ0qWTlt7wi5Aj/lM0sEWD/wtYbBjpNQybC7y+XZ40QPi:U/Qlt7wiij/lMRv/9V4b4r
- TLSH T1E8427C1297B089F2F151093419667F2A6FBEAC5D17F405A3CFE304C63D212CB9839243
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/modern-wizard.bmp
- Size 25KB
- SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
- MD5 cbe40fd2b1ec96daedc65da172d90022
- SHA1 366c216220aa4329dff6c485fd0e9b0f4f0a7944
- SHA512 62990cb16e37b6b4eff6ab03571c3a82dcaa21a1d393c3cb01d81f62287777fb0b4b27f8852b5fa71bc975feab5baa486d33f2c58660210e115de7e2bd34ea63
- SSDEEP 24:Qwika6aSaaDaVYoG6abuJsnZs5GhI11BayNXPcDrSsUWcSphsWwlEWqCl6aHAX2x:Qoi47a5G8SddzKFIcsOz3Xz
- TLSH T139C29757DE6B6EA4BE0804EF1A0694931C71FE211AB0CD0561D2B767B4FC93B19A0B3C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target $PLUGINSDIR/nsDialogs.dll
- Size 9KB
- SHA256 b1350f487692057c8ffde75dcc55287a52a3272240d4d4912f24464b27551fc0
- MD5 8f0e7415f33843431df308bb8e06af81
- SHA1 1314272e6ad3be1985d4a1607b890a34b0bde8b5
- SHA512 5450b2070c40b257c28ba9a472d762f91b78928d1e8d4d88e0576992065a61fb9a6513006e6b5947c415c9e02ae80a90a85b58da7e016a424331c8cd596ed684
- SSDEEP 96:obEv02zUu56FcS817eTaXx85qHFcUcxSgB5PKtAtoniJninnt3DVEB3YHNqkzfFc:obEvCu5e81785qHFcU0PuAw0uytIFc
- TLSH T19D12F892E2A454B3C5D6523B36AA2F2DCBBD5329B0927C01C7738E4D39395766E38343
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target $PLUGINSDIR/nsis_tauri_utils.dll
- Size 33KB
- SHA256 5ba143b5db4a87d32d6e7802e033330aae56cbceabe0d1e3ba41948385ad4709
- MD5 948eaa3cb78c2dcdd9eb1ab120ae0f65
- SHA1 75197fee3c6a814fe035788d1c34ead39349b860
- SHA512 f7c511e8c73ef6ee9b72c88cd73b2d454a6ffc12144118df2276ea3f5c34175df0d9d15a435035575ca2b171789fe348d7a9028b702b47dda749ee17e03ae7c1
- SSDEEP 768:K/wOD4gzTVpAVk2h5Rsekk55aCukBFKpnp0jdhK7W+qVG:8wODZzTrAV5Oevq4DtXHVG
- TLSH T188F24A48FDC57EBAE2CF05710809467E4A6FC8081700C96BE3722EA3D5A67329ED525F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target Quantframe.exe
- Size 43.9MB
- SHA256 0a370e82eeca44ad123295e97661016dd3761794bd95c05bc282254be2624a82
- MD5 b9a0ded0b7d80cd9791a20b00a5587ca
- SHA1 1665fad2257997ee9328181aa3a9368e4a93524e
- SHA512 19d7832fe422d90fb0efe01dccefb4a5d5b4373323611da79918b1e40be15ce9a3ed3610bcdac33a972b5aad855528ef936ffb8164b3bfe7b9a31e0f87a7b205
- SSDEEP 393216:uFW5qa68rjbmFfMPTSMJjrmtA2Mjjkm8Inb8iJIB:pMcmJGS4naCcm8IDI
- TLSH T132A707647A5A996DD19AC4B083478A725A7130DB0B35B9FF448892383F79BF46F3C318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Checks whether UAC is enabled
-
- Target resources/sounds/cat_meow.mp3
- Size 12KB
- SHA256 8fea7e748c92a48ffc6295aecd78439bbf9111af0b29695f73cbb13de565e7a1
- MD5 4e9438758200085efbe21e82ca8b31d2
- SHA1 70778ddd575b4bfc44b2ab0bb0c038f503bcf9ba
- SHA512 56c3bbb0b55e3c3c2d513260a2661020b32d9268b334cb862e8aa3902f19dbbdcd492c5f9771af2e53eead75f8689d9087fd1f516df68953175c5477d6753f05
- SSDEEP 384:WVwU3KfI2U4f4QC6AQr9weyDMVfHWShlbOuUPa6PoNAyh3:qwI2/gQuQZwvDMpHWS/b7OCh
- TLSH T11E427C451B6103A4CFA66F3E955FD33AA8B4060C4DEEFE15738A3326107D0C6B9780A9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Drops desktop.ini file(s)
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target resources/sounds/iphone_notification.mp3
- Size 19KB
- SHA256 244fe4607332f54d1b287d5847de9c532f91749ac2ff9fd0e54e49336f040060
- MD5 d7b19d056edf33124a4f38ef66ff8f63
- SHA1 2fe3530f3081fb3b5dfd554926e02a7c467c17cf
- SHA512 972ca6cfcd68d6f23199c8cd2f9f6bf24e076a7d185f78cdc8ddf9a7e6f2404f06bdcd3699c6ce5ef3cb86e6ceac1158bc072eb7bb840124330e4d184830ad90
- SSDEEP 192:6Y+HlpPnJsYBnX6BL3pIlyk9YWESmzI5Yeuyf7rF83Vi3b6+A4Wt:fyPnFBnX6L/k9YDqKt
- TLSH T16A929B9B6B6640AEF0562F3E719FA530C6D4AC0CEC12D9CAD920AB5186FFE513F75108
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Drops desktop.ini file(s)
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target resources/sounds/windows_notification.mp3
- Size 30KB
- SHA256 b82ad1b0f47754befcd496d772d49aff811b06f716e393450ef4153e7256d01b
- MD5 01993d81e3c665e5e130813eca7cad1b
- SHA1 eed50fc59edbfdd8666579ac310a5e06acd6e613
- SHA512 39534f79af0fd5358194e3dd97c385136d1ba3dc089ad74aebf30ed70f78891d914d2ebfce6441f3533fe170fe43b08fdaccfe5ef79b60301553a4c8b24d94f2
- SSDEEP 384:2LDzF6Xwxzoe4F0/jUZsm1W8o1ANgakUxhSi7NpyArC31vO+350zU/jC:C1600e4W/wz1WH1wxh35cAOtO+35f/jC
- TLSH T183E22B95BBA340ADE4673B3BB59F963583C0EC0DF852C6CB9410AB2592EE7543F59308
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Drops desktop.ini file(s)
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target resources/sounds/windows_xp_error.mp3
- Size 5KB
- SHA256 b2a4c06ea86a6bafe8c2ff2a2f7eb63fae07584c2bd9c6829e03159b08bbcfc4
- MD5 70c551b62191e35e2c3cdd525c6c0966
- SHA1 445075c611e07ae4abc68230a3ec6d354a14820e
- SHA512 36026c820c17bad9142a36a0bb36c2dabc4a3469b0d21fb51e001b3b7209d36781385cb55c3da925b8560e859f0b44c5c1d15380bcfd0de3b3e2ac7c919fa9be
- SSDEEP 96:Q17n6U0okyrOH729QvmU7zsiH4JPYp16HyzY/eW4UROz6uY6bm7DHCWcSf2ExK:W6U0oYw0zsiHGPTH74qujK7DiWhOkK
- TLSH T155C14A1963A0BECDC0069B72F6EA473B708959C4A2BE387952C56A172BDD310BF36125
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Drops desktop.ini file(s)
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target resources/sounds/windows_xp_startup.mp3
- Size 43KB
- SHA256 6814ad39658974ac25992dda1bb2bb90435965a8477ebd09339323d86e2fcc35
- MD5 3ae8479248c0727194b72cd7f815a954
- SHA1 8c6eeca5918479545205691b6f408a96e9e9d0bf
- SHA512 eb61f473820e6829303f0f75fd40b6642f65f6a7b04b1b74670d92cb2f926cea4f6d8c194b39c353016c4cf8cde58c9004e7643653fdd2cfbe52141efc2c31c6
- SSDEEP 768:GcJxAs2pJ19BLtg8x9DXljyh/WCNA5omhNAzeKH/cMd4nMPF2K5XE:GuEJdZgk9LljyhfA5omNOUnkFdXE
- TLSH T12D13F193EA59A88CF96797FC3F17B901E6D56683D80CF4C42564A7418B63209E3A9322
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Drops desktop.ini file(s)
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
- Target resources/tos.md
- Size 1KB
- SHA256 391ff782ce760fadfe4d6e19a5e28819ba1d89972ca1f44275f9c184f0e606e4
- MD5 69a569520ac57cae0991f86078053a8b
- SHA1 eb01f61e86aa9713621d40d7f8d7b5afc0793600
- SHA512 31596b197e7b7a829870f582a08dc27f8a341a0b8b0713d9a48128af612fbc34f26edc223280e5fb578e8b646cad1402dc4885ac11adb957c060711727483dbb
- TLSH T1A63164438647D77820772282882BD7F4FB2C50A5233ED6543CA081497796E6E8B37A9C
- MD5 SHA1 SHA512 TLSH
Score3/10