General
- Target Quantum_Notes_Berlin_6438.hta
- Size 229KB
- Sample260715-qqt8dsgw71
- SHA256 9033bcba2be4d10ac35d712a611f1cc9c5aaa9abae6d449503d822d0923e8954
- MD5 d922cb18128ace3071cafaa8f4bb304f
- SHA1 a8619c550a44c8f0a39e051785b143c86da66c8a
- SHA512 328e3ec549668d9c4d0751b6b445ed95f58c19dd61d28a356dec3416a27cf8ad04ce768e3ce57f46568e6d2c834715b8584f4864cb7a89546794bba65d434fe0
- SSDEEP 6144:Edmm+HjtelK6KGkKLZIFbWgW6e76cnERQhxD5Z8NH1WR5SOzoFk4An:pWkGOEN9vXsH1CDzoFQ
- TLSH T130342F832345EABCB2CE0BB2BC072555E1F8C815F99EA158B7B16DC77B9A9801434FD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
Quantum_Notes_Berlin_6438.ps1
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Quantum_Notes_Berlin_6438.ps1
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Quantum_Notes_Berlin_6438.hta
- Size 229KB
- SHA256 9033bcba2be4d10ac35d712a611f1cc9c5aaa9abae6d449503d822d0923e8954
- MD5 d922cb18128ace3071cafaa8f4bb304f
- SHA1 a8619c550a44c8f0a39e051785b143c86da66c8a
- SHA512 328e3ec549668d9c4d0751b6b445ed95f58c19dd61d28a356dec3416a27cf8ad04ce768e3ce57f46568e6d2c834715b8584f4864cb7a89546794bba65d434fe0
- SSDEEP 6144:Edmm+HjtelK6KGkKLZIFbWgW6e76cnERQhxD5Z8NH1WR5SOzoFk4An:pWkGOEN9vXsH1CDzoFQ
- TLSH T130342F832345EABCB2CE0BB2BC072555E1F8C815F99EA158B7B16DC77B9A9801434FD1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.