Analysis
- user interaction
yes - max time kernel
148s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
28/07/2026, 01:53
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
q9mq4sn.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
General
- Target q9mq4sn.exe
- Size 2.7MB
- Sample260728-cbgrvswblc
- SHA256 a48ed4349639c4b314d25901749ff0223feaaa821f01abe97b2a0397aac6b3bd
- MD5 de2e4457765ed14cfc3f132ade889d7d
- SHA1 075ff0b8849723beedff98378f6825f8d4c84c8c
- SHA512 a436cfb3ea1a0e605b8624a810acfb985251f5a1306209c117cab39da1128357c10fd79395f039b6072c7b03f7851fc10ad6475600136ab4bd90be50c2cbb753
- SSDEEP 49152:YoWUzyMWpqUcvj8VQTYvU4e+DGOA7MAu1wiSRev0zUrul3msE2qtNdtOcVsO8:wUztEt6jeQTYvU4e+al7emiSRGvutI27
- TLSH T185D523557657A9FDE913C03096415237BB32B48A1B23AAFF0A5406792F62AF10F3CE17
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 15 api.ipify.org