25a5ab17f6a80d96ca4c9b9233235efa6d24378cee3c063fe5be8a4ef0fdf798[.]zip

General

Target
25a5ab17f6a80d96ca4c9b9233235efa6d24378cee3c063fe5be8a4ef0fdf798.zip
Size 1.2MB
Sample260506-tvvaqset71
SHA256 25a5ab17f6a80d96ca4c9b9233235efa6d24378cee3c063fe5be8a4ef0fdf798
MD5 b87dfe73c21af3a866dcb234d10b0524
SHA1 ed53e8df57d82d9e79c63b79cf617101f910202a
SHA512 d8ff326baf91d32c59e47873512cbe7ef093308ddc70b3a3665d17e19af8bea4b57d9559ba2f50701775cf5cbaa0f1cbd16875be6f1cccc5f61e0fc60f79d1d7
SSDEEP 24576:CzaaxqyuOk1QOR/kaWkjY+3xY46wbIZScXpCol0QI+uBg:CuaT/OBJ0+h8w0ZpCWvuBg
TLSH
T1B34533664406C47D2A9E041F3B12E7AA5FE4B78ABC52BEFFF450497860DBAD89C31C05
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PO-05870-MQ-05868-QTN-1000-04-2026-PR08586.bat

File Explorer

25a5ab17f6a80d96ca4c9b9233235efa6d24378cee3c063fe5be8a4ef0fdf798.zip

.zip 1.2MB
PO-05870-MQ-05868-QTN-1000-04-2026-PR08586.bat

.exe 1.3MB

25a5ab17f6a80d96ca4c9b9233235efa6d24378cee3c063fe5be8a4ef0fdf798.zip

SHA256 25a5ab17f6a80d96ca4c9b9233235efa6d24378cee3c063fe5be8a4ef0fdf798
MD5 b87dfe73c21af3a866dcb234d10b0524
SHA1 ed53e8df57d82d9e79c63b79cf617101f910202a
SHA512 d8ff326baf91d32c59e47873512cbe7ef093308ddc70b3a3665d17e19af8bea4b57d9559ba2f50701775cf5cbaa0f1cbd16875be6f1cccc5f61e0fc60f79d1d7
SSDEEP 24576:CzaaxqyuOk1QOR/kaWkjY+3xY46wbIZScXpCol0QI+uBg:CuaT/OBJ0+h8w0ZpCWvuBg
TLSH
T1B34533664406C47D2A9E041F3B12E7AA5FE4B78ABC52BEFFF450497860DBAD89C31C05
MD5 SHA1 SHA512 SSDEEP TLSH

PO-05870-MQ-05868-QTN-1000-04-2026-PR08586.bat

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 f82ba03e14d2cf4c3602478c465c3a10289b6169b6e58046a079637a10888652
MD5 5ff23d57c4abe4bba18145134a2ae262
SHA1 16e028888db244487632a75f74fca062bb4983d2
SHA512 06963285538f0bb5dac688a3e70e7ef39cfdb717e8b0494462fd26bd8d6fff29a0d80d7409f5320555bd0b8a00af8b33b06120c5eb99e8ca7aaddae678bbf918
SSDEEP 24576:zrLtxqyUOAdc14ON/Uk4kjY+lrY4+ZFBerJ2U1zCEIasbbBoaJAaCzZ5:v5TSzOVJs+xw3U1zsy2AaCV5
TLSH
T11555F1D43A26E716CD920A71AA34DEB116F81EACF401FAE39ED93F6B70AD1505D0CB41
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1382534

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

25a5ab17f6a80d96ca4c9b9233235efa6d24378cee3c063fe5be8a4ef0fdf798.zip

PO-05870-MQ-05868-QTN-1000-04-2026-PR08586.bat

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

25a5ab17f6a80d96ca4c9b9233235efa6d24378cee3c063fe5be8a4ef0fdf798.zip

PO-05870-MQ-05868-QTN-1000-04-2026-PR08586.bat

mscoree

dotnet