aa36951113e3910739b4d123962365edaa2d51669efbdf5d4c90227def8f5802

Target
QuantV FiveM 23-1-31.zip
Size 27.5MB
Sample260930-nfad5ashnf
SHA256 aa36951113e3910739b4d123962365edaa2d51669efbdf5d4c90227def8f5802
MD5 13861255f7627f21875f31e6e1471712
SHA1 dac5d9e848febad88d21e2c2e859e90cc966ac92
SHA512 148f554e34131d3479e02f36d987fbb3346a67c6dcee469d10e0f5685fffa58a53ed254f0a82dd3b3d9e23d09feaaa1978da379d1faa62e2f5c715306822da17
SSDEEP 786432:wiVGx1TeSEsP45OoX3EuRt46nKGFc0l37G3Dekv4Qe8Kiz9+Zd/M1+npWJ+YKFs9:wbTe95VUCAj99
TLSH
T1AE573376B44B3C65881BF1624AFC6D17DB013AA609368DB1FD3992897CC8ECD1716A33
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Targets

- Target
  QuantV FiveM 23-1-31.zip
- Size 27.5MB
- SHA256 aa36951113e3910739b4d123962365edaa2d51669efbdf5d4c90227def8f5802
- MD5 13861255f7627f21875f31e6e1471712
- SHA1 dac5d9e848febad88d21e2c2e859e90cc966ac92
- SHA512 148f554e34131d3479e02f36d987fbb3346a67c6dcee469d10e0f5685fffa58a53ed254f0a82dd3b3d9e23d09feaaa1978da379d1faa62e2f5c715306822da17
- SSDEEP 786432:wiVGx1TeSEsP45OoX3EuRt46nKGFc0l37G3Dekv4Qe8Kiz9+Zd/M1+npWJ+YKFs9:wbTe95VUCAj99
- TLSH
  T1AE573376B44B3C65881BF1624AFC6D17DB013AA609368DB1FD3992897CC8ECD1716A33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral1 behavioral2
- Target
  README.html
- Size 4KB
- SHA256 bcd9b14cd2299ebb830ade106e5713ab2c04b7c4d1429dc5d838e62c4d3b51ed
- MD5 e1c790d9f908c7ed6980452c06c62811
- SHA1 62f859917533a29000bf94bf8d856c21d43474d8
- SHA512 4484d2d1363b655e2c1cfe6cdb41b34bf6a4eea39ac616e6439d49f4af09b219cc58855d579567e11b764ef6eeb8bbba51e33f213438a7d98504d71bb6b22829
- SSDEEP 96:WFexp0CkJfAA2OaYTVAPVsD4JEAf2sD4JrQAIM1K7KEvSA0+9OFeb1:WFqp0CMxSKU/UwWFEwwOFG
- TLSH
  T1479152F352812C3B1993B7B59033FB5DE1D74181CB835696E8FF029B5385D82C45398A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3 behavioral4
- Target
  _Install/1._BaseMod.url
- Size 166B
- SHA256 f146b3d22759d99f5c2362caa2deec989140403ef059ffb66887a9a50537b848
- MD5 90ebe6a9951b00ddfee453d6c6fd961f
- SHA1 142182277472fd976e4334ed95b4111bb6da8984
- SHA512 d2e39fde1d7acf64666b89a256426c92915820d727ecf919a781332523d21d831eb41085fcda1c0ca10f74c6c9a6cb13877abd5acb53497912a3fa1f9f121ee5
- TLSH
  T13FC08CEBB649DAC6D266900A21B0F80CD82E72A048E2E0BD5140C9671D89899C895EB6
- MD5 SHA1 SHA512 TLSH
Score

6^/10

discovery
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral5 behavioral6
- Target
  _Install/QV3_FiveM_ENB.oiv
- Size 6.6MB
- SHA256 eba0d7e4eafd3120cbad212f48da28ca451ff3a430f3c96c0a070c481993a1bf
- MD5 1b68ec87c22e8f7bff1b687ddfb47756
- SHA1 9bba57fa3a5c1abf6ddae24859b6f1b0f5ebf988
- SHA512 61ba670d94eda4eb18c49a49098e2b6f6c906969cca2c273ef8c3d6a0fd473bbfae71043c2bca525aa5c13d298d92cd23bd16cbf2f53d7ac1894771cb13cb724
- SSDEEP 196608:KnuFHMj6+7jpD1zqKnI+6AXo7WEgbcZlgpw6BLzoT+L:KWsm+7jpoyI+6soaE3ZlQsaL
- TLSH
  T17C663365E24D4523EBE3C23209D56D17D050C44189EEB88F2C94AAECDAF9FE622F5770
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral7 behavioral8
- Target
  _Uninstall/QuantV_ENB_Uninstall.oiv
- Size 19KB
- SHA256 f3768ca5025f6dc7c6babd2178500911bd171b47f9133f947c066edd75b99ed3
- MD5 ba921ea786f90bc4096d67306eea06d4
- SHA1 70702672db7361c1b05708035f1c812aba751db8
- SHA512 0da15de107188b1570a40f46f693ea7efe943e3b0760f361482c835d511f331975dd62cfcf0106be129395f1c4368836f184312b18169794881e009eedff6eb7
- SSDEEP 384:UPoYBmZaGX2HEYYtcpMMwnAGMqHgF8ZSPDNgReG7Z42:jYBsaA2HVZpSp7gYSZgXu2
- TLSH
  T1EC92D0036590CFB1CD2EF3FA56EF0D922849B5B04F25581668A619009A4CF0E57F1BE8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral10 behavioral9
- Target
  optionals/ENB performance-quality presets/1._ENB_Hyper.oiv
- Size 227KB
- SHA256 d5fbb48038be11ef03ac71889556d6717b8312c3307fdb5d587b0dd2d2a39c7e
- MD5 78549102ef4af7b765325845699950cb
- SHA1 e92b51125505df1c9acc37eb2b4f49afe432daea
- SHA512 5110315328002ab80de945bb54b50b52a0fa7634e2f1ffd5f1e573c23cc604c5900037f7cfb8fe4678344d3f149ed6c075a5ded0bc9769e6b9195ac0ac66fc87
- SSDEEP 3072:DzhSpEUS8TKTKlhlbgyB07YLWwEmswNqCXDLH5UMvXl2bqXTqe9An1J0ZA0+wgvb:D/mmQB07YLWwhNvTtVcbqdZdLc
- TLSH
  T18A34D071D51F42A3C69BE13A19B6AC16F4A0E0144EC8B40B3C8465EA8FD5FE017E277E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral11 behavioral12
- Target
  optionals/Optional presets/blood effect removed/QV_blood_removed.oiv
- Size 7KB
- SHA256 4a03626d7a0a179920409f503cdfb4e6fc4eec1be618d6e3b81e701776a07f2a
- MD5 a19edfe9df66017c899ece05f445a65c
- SHA1 a0680ce4f0ebaae12003efedb58bc4bf5b49229e
- SHA512 cd7e95fe5d10c256f48bb9ee41e67f0271a492175aeeedc5d4cede18ee6f3e89e19fcd5fecd3b48c87a260671eaac21bff7b53c2ad0449575be24d1673fec531
- SSDEEP 192:kt2sI4OuB8nuMJ0tWGSSyzTDNyt1IItZyvEg1hCty:kAFWMJ0lSX1E1HtMxhQy
- TLSH
  T142F19F19C5F51380C740EB3B29EBB94B509EC338C970A82B7F9E68C43DCA5BE4666156
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral13 behavioral14
- Target
  optionals/Optional presets/chromatic aberration removed/QV_ca_removed.oiv
- Size 7KB
- SHA256 a4cede818d9a89fb1a6dfba27eacd1a55d3f7db950e79e7b465a460b449c57bc
- MD5 547d5ea4c3c063f0f6e77476ed081da9
- SHA1 9afabbedb1bfd40f5577d84bca83f4f77b15250d
- SHA512 b3ac7f2e1eb5043c60f0e751d15eb3b7b9fa83cb86d581b67c4253590a4d851e55057c9a43267cc7fa3c7ec85aa3dcd34033961cd873b4b9588b186063523126
- SSDEEP 192:meOuB8nuMJ0tWGSSyzTDNyt1IItZyvEg1hCtE:mAMJ0lSX1E1HtMxhQE
- TLSH
  T1E1F19F16C9E103C0D680DB39399BB91F40DFD3284A70941B7AAE75C83DC96FE46A5166
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral15 behavioral16
- Target
  optionals/Optional presets/corona light/QV_corona_thin_rays.oiv
- Size 178KB
- SHA256 aa0b8cc521768b4102eb1d5923a1bc79b7cf5e8b543994420b4682cebf4a4ee3
- MD5 7776871ffbf42889dfead875b939c2d7
- SHA1 8c5e38f7135778d01df1fb824205199d4a1c2843
- SHA512 7707effbf0d20cdab10487b09ca26848df6dace27c1a2453dbfe777dd316ae857a36246199328a239f8d186ad9b97116e244b2c226960019f3108ad3ddfc8d20
- SSDEEP 3072:dzhSpEUleDYWYLP8EYswNDRXojHCUQ999qrDRJa/t+ygWd:d/9DYWYLP8DNF4eX9qu/t/
- TLSH
  T1EA04D132E50E5B22D69BF23A09D5EE16E470D11846D8E4072C8574ADCBD9FE017F2B78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral17 behavioral18
- Target
  optionals/Optional presets/corona light/remove_corona_everywhere.oiv
- Size 22KB
- SHA256 e60590c89fb45e76e81992d1d9d0324a4537648d86949146ed9f3a4a138ddda5
- MD5 9b7b0c39cc126a391bdf79d12e0a338f
- SHA1 56374d375008275a2bcfb74169249af8d387cc56
- SHA512 273369f51ed8d9950deefe81b65d425bb36052ff9464b2f123f4321e18679b55ad5700e5310a77b088a3a3b9c4313a5357ac1c48770aad6ee2ac3f512278ec7b
- SSDEEP 384:cbBmZaGX2HEYYtcpMMwnAGMqHgF8ZSPDNgReG7Z4JuUNtt:cbBsaA2HVZpSp7gYSZgXukutt
- TLSH
  T1F4A2DF0775A9CBB2C91FF3BA52EA0D52394CB4F18A2A5411786229149B8DF0E07F1BDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral19 behavioral20
- Target
  optionals/Optional presets/corona light/remove_corona_from_vehicles.oiv
- Size 23KB
- SHA256 8038bed125b1a9420d04beec5f26a89a10bfcb53d5410958710e5b8515f5d4e6
- MD5 6372faedbfcc20f49e0e5177ec526e4c
- SHA1 f01e7287cb082e8deabe972f05e7d8443c176a86
- SHA512 d08aa4f6a40207e5ab6f6d8eabb9513e40cb2ce23c6c5d7887016fa446c76e50e7f524a85de0acac6e7f4839ccc4542c895eee3c8251b0989be66852ede3910e
- SSDEEP 384:dBmZaGX2HEYYtcpMMwnAGMqHgF8ZSPDNgReG7Z4Xm64ghZcwO34CM:dBsaA2HVZpSp7gYSZgXuW64ghkM
- TLSH
  T168B2D0076995C7B2CD1BF3BE45FF1C923D4AF5F18F26041A285359408A4DB4A8BE1BD8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral21 behavioral22
- Target
  optionals/Optional presets/corona light/screenshot_comparison.html
- Size 2KB
- SHA256 034b5d6e09303e16eefde5d43f7ff40d36a26b11a7c2c6754faa9dc628651f91
- MD5 441a2da471a117515ad1143f142161cb
- SHA1 a743dce4117088ed8a693bad44eb7a857ba767d1
- SHA512 02ca9300e133db9c43541acb7acf700407839a7c0809d8ba29c6d14d8e0f1f685d4f54f712b25ff0e4ebe36852fb968053a2d7905d2e99ab886148b724e7a3e0
- TLSH
  T1605174B320135C19345F40BC77E2F28A8121A146E38AB9C4809BF7F79286E83F4A7D56
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  optionals/Optional presets/corona light/screenshot_comparison_QV-thin-rays.html
- Size 2KB
- SHA256 31cceb9bab6a3b063a27064b6f2fed8d818e02f6fe7e7a34303f1a4ad6732a32
- MD5 169b41e351e27133fc1f3283e3392786
- SHA1 0fb50d843d113fdd3f6e25a10a2c964b1b778a96
- SHA512 5f45d1d2ad0b273d46aa93b2dd75e1779acda57fc391ae5df04dfeeb988160fb9bf84fd25699aae458ddf72e0c527d0ee1aee9c9be389659604a7eb31172a33e
- TLSH
  T17141857320B35C19306F85BE27D5E28690556185E38AA984B0AFB7F7D281DD3E8E3C49
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  optionals/Optional presets/metallic paint/QV_iridescent_metal.oiv
- Size 222KB
- SHA256 162947c0e1bde4cafd09dc1be3b9be6f5b940eaa8c132145403e8a90071e1c84
- MD5 802cc2858603b540e4448150a79a92d1
- SHA1 5e7cb6aaa108a14a0f3293a853f1f1a685d54876
- SHA512 dc883f5b4520c1506bc42ff2d9c3d9799750d86b318a5b044bbedf6e173e2f3dab8ca9636c6148c474e90805eb27d3941081a80f9ea9e9e1363c5b920ad4fbfd
- SSDEEP 3072:hzhSpEU0Ll7Hy308YL/yEGswN37XRnarSVcH5UZq9UqQXKmY9ZY5+4+gbS2b:h/ZLy308YL/yhNrpFV0tUq/+5/b
- TLSH
  T15724E163E50E5723D79BF23609EAAD56E460D01885D8B40B2C8564DC8FCAFD067F2B78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral27 behavioral28
- Target
  optionals/Optional presets/metallic paint/QV_metallic_paint.oiv
- Size 223KB
- SHA256 76dd0065f1c8544b44b47af108a99dd58c339d73da36b6295de2123f1d7d682a
- MD5 2f55fc10608c1c8f45e01817c96cb5ad
- SHA1 cb0b7a0f9220c3f3b5ebcce46ea19497470676bc
- SHA512 6321062a4a43012109678314be296c79d57bc9663d98ba9d35a1eb490cc356809820f478d8cc842ec97cb1fc32e79426e87822130d5aee2edfce29c9a2a83f9b
- SSDEEP 6144:9x/02t/ASFHYLDifNtRWNhkmRqgsQrFwrD:9F029dsD0RWNhbgLrD
- TLSH
  T19224E131E60E4332C7AFF23659DAED5AE464D4188AD8A40B2C456498CFC9FD057F2B78
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral29 behavioral30
- Target
  optionals/Optional presets/metallic paint/QV_metallic_paint_+_iridescent_metal.oiv
- Size 232KB
- SHA256 f14168a9c6a1906a61dbafec302b213cb1f8bbd97d35d03bf05d7ef5e22a7601
- MD5 4be5879ee38c353b360aba46eaf662ab
- SHA1 82b96e7287667223b617af9c76450174a3730f73
- SHA512 7d4ac38e5c89d344491ba56d6a1d67efc7f2292f971371a1b2fc0eb479c993afe8db4aa5db0916c7c88798bf7f44e1cea2f845f5de18b15eb061ca721799ed1b
- SSDEEP 3072:2zhSpEUNDAd0fYLXEEqswNSOX5JBoLcH3Uwh+sQeqDHPi7l1pCU0+Mfdgcd+h:2/MDu0fYLXEJNXJJB/UsPq210U0Jfdc
- TLSH
  T12C34F136E51E8622D69FF23645AAAD16E030D06886D8A40B2C85659DCFD9FF013F3778
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

1^/10
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32