7f9cd2b0a3c895c4057f70ce6e20475fc746e2ab2a9cfa9ed5a0cf7d659a8099

Sharing

Copy URL Twitter E-mail

General

Target
QuantV_Latest_2026.zip
Size 34.7MB
Sample261009-w2f3ssdd67
SHA256 7f9cd2b0a3c895c4057f70ce6e20475fc746e2ab2a9cfa9ed5a0cf7d659a8099
MD5 5aea08dd9840052f6f52cc35fee80add
SHA1 5adda290417b11ca1f88f89bea59c07487449141
SHA512 1fea7255a04b8b63bca119487b09f032d83fe7acd8302a54af71c09ecbe7603080c6ecaaf870fe83f58f65940c1dd2bdc48f6cb20c923c773fdae3cd5ee48baa
SSDEEP 786432:sZu/EVHKQgYvbm+PXxCe2zJ9k+5Er4EP9J71aZus+Ou3ulCCnCCYCCa:58Vs9nPu+sT0F
TLSH
T1ED873316B84B3D90988FE46605ED5F1B9F103C920D3ACE717A2EA2897DCCD8C6756D23
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

Malware Config

Targets

- Target
  QuantV Latest/_Install/FiveM/QV3_Install_FiveM.exe
- Size 8.0MB
- SHA256 6c2446f06869a50df82165dbbc78527186cc70e8ebb50c48634de0ab9057c00a
- MD5 53648dee77c997e3665a8c3add00eeaa
- SHA1 dfeedc4eae6c517ef1286bd041cc36de8a608f46
- SHA512 598afff16262ee75f9866a62a124407c6ef5dff8c577371ea79ea8817805be998ba6d0553497400312c1cf5c0106772696727f312bd55ac99a8c23dd6e138f65
- SSDEEP 98304:V3T2h9PPeJzgg3ty1qrMGUjEBoSMeduU8gsHZVY/YK2:VjigJMg3E1qwQFM/U8gsHCYX
- TLSH
  T1FC867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E75350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

credential_access discovery execution spyware stealer
- Credentials from Password Stores: Windows Credential Manager
  Suspicious access to Credentials History.
  credential_access stealer
- Executes dropped EXE
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2
- Target
  QuantV Latest/_Install/SinglePlayer/QuantV_Install.exe
- Size 8.0MB
- SHA256 6c2446f06869a50df82165dbbc78527186cc70e8ebb50c48634de0ab9057c00a
- MD5 53648dee77c997e3665a8c3add00eeaa
- SHA1 dfeedc4eae6c517ef1286bd041cc36de8a608f46
- SHA512 598afff16262ee75f9866a62a124407c6ef5dff8c577371ea79ea8817805be998ba6d0553497400312c1cf5c0106772696727f312bd55ac99a8c23dd6e138f65
- SSDEEP 98304:V3T2h9PPeJzgg3ty1qrMGUjEBoSMeduU8gsHZVY/YK2:VjigJMg3E1qwQFM/U8gsHCYX
- TLSH
  T1FC867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E75350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

credential_access discovery execution spyware stealer
- Credentials from Password Stores: Windows Credential Manager
  Suspicious access to Credentials History.
  credential_access stealer
- Executes dropped EXE
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral3 behavioral4
- Target
  QuantV Latest/_Uninstall/QuantV_Uninstall.exe
- Size 8.0MB
- SHA256 6c2446f06869a50df82165dbbc78527186cc70e8ebb50c48634de0ab9057c00a
- MD5 53648dee77c997e3665a8c3add00eeaa
- SHA1 dfeedc4eae6c517ef1286bd041cc36de8a608f46
- SHA512 598afff16262ee75f9866a62a124407c6ef5dff8c577371ea79ea8817805be998ba6d0553497400312c1cf5c0106772696727f312bd55ac99a8c23dd6e138f65
- SSDEEP 98304:V3T2h9PPeJzgg3ty1qrMGUjEBoSMeduU8gsHZVY/YK2:VjigJMg3E1qwQFM/U8gsHCYX
- TLSH
  T1FC867C43EC9159E9C1A9A33089A79253BB71BC481B3223D72B90F7392F76BD06E75350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

credential_access discovery execution spyware stealer
- Credentials from Password Stores: Windows Credential Manager
  Suspicious access to Credentials History.
  credential_access stealer
- Executes dropped EXE
- Unsecured Credentials: Credentials In Files
  Steal credentials from unsecured files.
  credential_access stealer
- Accesses cryptocurrency files/wallets, possible credential harvesting
  spyware
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral5 behavioral6
- Target
  QuantV Latest/optionals/Optional presets/- visual presets/screenshot_comparison_brighter-nights.html
- Size 2KB
- SHA256 4a5fe2ec0e69f9ce70422d087c3b1e6ac01b5023f0c1a32a0ac0ef02d1745ee0
- MD5 13c4792a4f13068e0ccdffc7f167a644
- SHA1 cc63cfb1852e73f12c8676e7b264c61cedc6635f
- SHA512 13e87e7f03c23ded68f9d0bab75de1bb0807ee7b0eee57ec479f8869cc0ad5b27a30c53b6a3419250df3038e86b146e46bacb94c343a2c8ff407bb1f8e58f864
- TLSH
  T15B41B87330031C19315F81BE73D5E185C0266145E3CE7854F4DBF2F79285E81A8A3C66
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral7 behavioral8
- Target
  QuantV Latest/optionals/Optional presets/- visual presets/screenshot_comparison_vivid-summer_vs_cinematic-lut.html
- Size 2KB
- SHA256 d34e89925d9ee3c89858e170e88cf43e9f8bf85d5f28258149431979445c2193
- MD5 d1b44f76e97a141fe899c059a3f7e90e
- SHA1 b2e9768f6198ffc03b14efe098903909555ade05
- SHA512 5ecc83e6366e81a54e6885a41d438e539be8e068257e4831881d7e4483512451fe4029a4dddd29148c674a17b93b293bc294109591198f7b81ee2c078d2a65fd
- TLSH
  T10851867320235C19215F447DA399E082C2266144E3CE6954E4DEF6F7D588F42E9A3C76
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral10 behavioral9
- Target
  QuantV Latest/optionals/Optional presets/blood effect removed/screenshot_comparison.html
- Size 2KB
- SHA256 13efb708c55017c56918309c926cc10a0ebf428d8ddd2be2a157220232fa95b2
- MD5 967eff1fd20f255eefcc196d78c8d133
- SHA1 3b5f50aa815443a94cffccbe38e2b600feae5eec
- SHA512 585aaccfdcd5b51c2580118ac10aad134e23fbc191bfdb7c22d8d78274f98017a75240b5a27239d2858a54cc9fbec3d45214e92e39091fb1641e86d5e0b4f82a
- TLSH
  T11041777330538C1A309F81BD3BD6B1419255D144D7CAAA44805BF7BB93C5A43B4B3C53
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral11 behavioral12
- Target
  QuantV Latest/optionals/Optional presets/chromatic aberration removed/screenshot_comparison.html
- Size 2KB
- SHA256 38cc63100516a57363375ec0d777d3e46cad05b25766410bee5baa817e54a8fc
- MD5 10875530dbbc5c28239aa4a04ed4c46d
- SHA1 e19d95c70b2c475a7cc00ba4662489f19a79eb24
- SHA512 76dafb0fecec0af9ed9df6499d83f6407ec3f88d08cc2de9e049320e7caf9e962f0684a915df29f609a3f38a3413a4c66f65191d4e52cbf51f0e86fca8d69a2d
- TLSH
  T1444177B330035C29309F417C77A5F24291A2A140E74A7944819FF7FB92C5E82F4A7952
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral13 behavioral14
- Target
  QuantV Latest/optionals/Optional presets/corona light/screenshot_comparison.html
- Size 2KB
- SHA256 034b5d6e09303e16eefde5d43f7ff40d36a26b11a7c2c6754faa9dc628651f91
- MD5 441a2da471a117515ad1143f142161cb
- SHA1 a743dce4117088ed8a693bad44eb7a857ba767d1
- SHA512 02ca9300e133db9c43541acb7acf700407839a7c0809d8ba29c6d14d8e0f1f685d4f54f712b25ff0e4ebe36852fb968053a2d7905d2e99ab886148b724e7a3e0
- TLSH
  T1605174B320135C19345F40BC77E2F28A8121A146E38AB9C4809BF7F79286E83F4A7D56
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral15 behavioral16
- Target
  QuantV Latest/optionals/Optional presets/corona light/screenshot_comparison_rays-v3.html
- Size 2KB
- SHA256 eab6f783929102680da0b2e6a4466f538d06c0842413eb859044d953b739b34a
- MD5 1ad7bab12eaa0ca034681b3e1246f085
- SHA1 4c4f076c8a458067f2672fdfc89a01f9cb273c04
- SHA512 aca76b9348e7dc61aabd39e270ffc4312646528927f5f9426ea0095eff66fba9cd4c73c34da085003b4d1c94710b803b66bae64a4ef6cfdf7f677d9747fc724d
- TLSH
  T18841847330538C1931AF41BE7AD5E1858156A145E386AC84C09BF6F792C6E93A4F7C46
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral17 behavioral18
- Target
  QuantV Latest/optionals/Optional presets/corona light/screenshot_comparison_thin-rays.html
- Size 2KB
- SHA256 31cceb9bab6a3b063a27064b6f2fed8d818e02f6fe7e7a34303f1a4ad6732a32
- MD5 169b41e351e27133fc1f3283e3392786
- SHA1 0fb50d843d113fdd3f6e25a10a2c964b1b778a96
- SHA512 5f45d1d2ad0b273d46aa93b2dd75e1779acda57fc391ae5df04dfeeb988160fb9bf84fd25699aae458ddf72e0c527d0ee1aee9c9be389659604a7eb31172a33e
- TLSH
  T17141857320B35C19306F85BE27D5E28690556185E38AA984B0AFB7F7D281DD3E8E3C49
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral19 behavioral20
- Target
  QuantV Latest/optionals/Optional presets/disable anamorphic lens/screenshot_comparison.html
- Size 2KB
- SHA256 0c157a4bc650f1be70e71269a5bd9f64fa4f11d9975539ff627d591a41a2fb9a
- MD5 af484a23ddf253137b4fa1978b3d50a2
- SHA1 f66cd73d8da45bc0d61e5bfa1d4c0b63b4ad0e0f
- SHA512 0fff17eb5aa70b92af1637175b764dbd1620f37c6bd275a00001c3692e850b9816a2f59814bf633464b82145749c74d8938e47c1afca2860fcd01487b4ac77c3
- TLSH
  T13E41757330534C2A301F50BD77D2E2428155A144E34AB96890ABF7BF9589E92E8E3D53
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral21 behavioral22
- Target
  QuantV Latest/optionals/Optional presets/metallic paint/screenshot_comparison_iridescent_metal.html
- Size 2KB
- SHA256 c5f9ac70cf50064b8181e05109a19325db72e73eec6177faf4c597c2586cda54
- MD5 4a346af755807d92ee11ee42c1fe63da
- SHA1 f983603ce3e30d97328635a88a13fa060d105931
- SHA512 4986fd3d5b6bc5a739ed883ecda5e257c817c4029d1702d9f499106c458c9107b74c4e5818fc7f4f023f4f92d79aba36b2e99375b10d0090f163d67cbd277525
- TLSH
  T10341937320235D19305F92FCA7A0F1848152E58CE38D6884B09EB3F7DA845D6A8F3856
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral23 behavioral24
- Target
  QuantV Latest/optionals/Optional presets/metallic paint/screenshot_comparison_metallic-pearl.html
- Size 2KB
- SHA256 95e9a16f6f314516d35dcffb79b83eb0d5ea7faba6e39db0aa0f300aee37c6bc
- MD5 5e5b4487ebd2bbb559d55131d15c8e83
- SHA1 edc96fe4e1228f6dfab57773fe96ec83c333eea9
- SHA512 a5a21476ec38b974da0206b172da64de18b31f756e9238d9ca059134eecd9ca3bbc7c162c651dc96af310b9868525157ea3d5672e504576349f2e870e9c5e6b0
- TLSH
  T1A741963320725C0A216F52BDA791F1458166D149E38E7884B5DAF3F7D285AC2ECF3886
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral25 behavioral26
- Target
  QuantV Latest/optionals/Optional presets/raindrops/screenshot_comparison_screen-raindrops.html
- Size 2KB
- SHA256 2f715ff9e3d4e7ffb35fa3afccf2bb251f68bfab71de34098db39eb9fa34bbf3
- MD5 ea876520d10ee197f1ac518c5e82ff65
- SHA1 a51291a9a92db48a31baa4abbb2a12abf6f732b6
- SHA512 da523a53c5589de545c5282c408e65e95d773b0e5395646067c8266cb52abb102a27d95474702e595348d12fea66874692be83190308bb75440214f129a48d78
- TLSH
  T17651957330036C29205F92BD7BA2A00995BA900CEF065850C09BF6FBBA91F9694E7D85
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral27 behavioral28
- Target
  QuantV Latest/optionals/Optional presets/shadows/screenshot_comparison_smooth_shadows.html
- Size 2KB
- SHA256 519d14af6af3b827df03fd65f52123d96b4ffda9dad88c3ee16328d073b18a7f
- MD5 74f6e8bf083b1677955f63b8b7e0503e
- SHA1 b1bdf4d2e7c5bffdef0705e8ce9296aa725e2540
- SHA512 554603cc83f9428501181215affe37a392e38acb84d0558e34b95f31a9d7976e213af4be42467282c3a7e254cb1802404fe46447ed4dc978efd180658d1572ce
- TLSH
  T14D41A67330734C1924AF817D3B95E181822A9044F3CFAE44A09BF2B79281E92E8F3C57
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral29 behavioral30
- Target
  QuantV Latest/optionals/Optional presets/shadows/screenshot_comparison_smooth_shadows_interior.html
- Size 2KB
- SHA256 2fdca6e78c8e07915309d31202f974f95c8d5c76d9ca7e505d9722991cff83c2
- MD5 9dc0d71be90231d7dc58f70346ec0280
- SHA1 c4514aa3f06097b3888890aa771bfadb7d7df0a3
- SHA512 b04fc34f405616b46812fd0d5020427c35fec40018e7b990da1ea4955b3c4f9a6b9b1ccb2d25ce9e1329404bb06c373adaa0f27900dfa3e66e8f829bbc54b54c
- TLSH
  T1E341A97320434C2A315F817DBBB9A1429166A184D38AAD40C0ABF6F7A6C5ED2F4F3D52
- MD5 SHA1 SHA512 TLSH
Score

3^/10

discovery
behavioral31 behavioral32

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Windows Credential Manager

T1555.004

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Targets

Credentials from Password Stores: Windows Credential Manager

Executes dropped EXE

Unsecured Credentials: Credentials In Files

Accesses cryptocurrency files/wallets, possible credential harvesting

Contacts third-party web service commonly abused for C2

Credentials from Password Stores: Windows Credential Manager

Executes dropped EXE

Unsecured Credentials: Credentials In Files

Accesses cryptocurrency files/wallets, possible credential harvesting

Contacts third-party web service commonly abused for C2

Credentials from Password Stores: Windows Credential Manager

Executes dropped EXE

Unsecured Credentials: Credentials In Files

Accesses cryptocurrency files/wallets, possible credential harvesting

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2

behavioral3

behavioral4

behavioral5

behavioral6

behavioral7

behavioral8

behavioral9

behavioral10

behavioral11

behavioral12

behavioral13

behavioral14

behavioral15

behavioral16

behavioral17

behavioral18

behavioral19

behavioral20

behavioral21

behavioral22

behavioral23

behavioral24

behavioral25

behavioral26

behavioral27

behavioral28

behavioral29

behavioral30

behavioral31

behavioral32