Analysis
- max time kernel
149s - max time network
153s - platform
windows11-21h2_x64 - resource
win11-20260130-en - resource tags
arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows - submitted
02/05/2026, 12:09
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e1bqi8.exe
Resource
win10v2004-20260130-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
e1bqi8.exe
Resource
win11-20260130-en
1 signatures
150 seconds
General
- Target e1bqi8.exe
- Size 1.2MB
- Sample260502-pbqe8aex5z
- SHA256 f7988b9738e1a15fcff47517167404f2322994c5b4bd77f67cec856413f559d6
- MD5 b7476812248be874309354a96b46438b
- SHA1 5a67c5fe488c2a59903bee023d0570088878f83d
- SHA512 7d8f1e1cd85984ee65f838da3255a9ac8dd01f171038f0b6c78a27355eb218ae596b6dc500f8a7885f4c6274778eb8fa77ca3ce511bf29a781e664dd831e4704
- SSDEEP 12288:T+HUnzT9inzIo+094ht5m/nylAx4M3FuiXh066XwThxoSvw9E8:VT9inzI9BM3Fa66XwTVI9E
- TLSH T1E555A54BE7B611D1F4BAC139A562322AFC7234A58738D7D792859A0E5B30FE4AD3D700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 1 raw.githubusercontent.com 6 raw.githubusercontent.com