30072026_1606_30072026_TSM Enerji ihalesi NTF EMR-5-30072026 PDF[.]rar

General

Target
30072026_1606_30072026_TSM Enerji ihalesi NTF EMR-5-30072026 PDF.rar
Size 1.0MB
Sample260730-tkatcabh97
SHA256 fa04504343ee90a3cb076cb760e4578b8e8e27d2705efd07cdb8b382da18b8ea
MD5 b6b9be92856a2c5cd7697d1fa245eb14
SHA1 7dd99da0551b503c1d8c0ee360b67f132ddb34a2
SHA512 ad67b6690543c140bcefcd1d2712041dcf54144965ea43228bb997c60bec9891a5e227a301abdc5b0b90010ef258c7049582c57574bb9fa8d6dd7e40c5499af4
SSDEEP 24576:HIhZ69yAr3CnTYouNvVZFBiS1ADKHHv4aJEJc0:U6V5bvLz5qwHQvj
TLSH
T186353319F9A61BBCC8B8AA343B359134C4D87D6BF080721FD605586BBF1DD6091E3DA8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/TSM Enerji ihalesi NTF EMR-5-30072026 PDF.bat

File Explorer

30072026_1606_30072026_TSM Enerji ihalesi NTF EMR-5-30072026 PDF.rar

.rar 1.0MB
TSM Enerji ihalesi NTF EMR-5-30072026 PDF.bat

.exe 1.2MB

30072026_1606_30072026_TSM Enerji ihalesi NTF EMR-5-30072026 PDF.rar

SHA256 fa04504343ee90a3cb076cb760e4578b8e8e27d2705efd07cdb8b382da18b8ea
MD5 b6b9be92856a2c5cd7697d1fa245eb14
SHA1 7dd99da0551b503c1d8c0ee360b67f132ddb34a2
SHA512 ad67b6690543c140bcefcd1d2712041dcf54144965ea43228bb997c60bec9891a5e227a301abdc5b0b90010ef258c7049582c57574bb9fa8d6dd7e40c5499af4
SSDEEP 24576:HIhZ69yAr3CnTYouNvVZFBiS1ADKHHv4aJEJc0:U6V5bvLz5qwHQvj
TLSH
T186353319F9A61BBCC8B8AA343B359134C4D87D6BF080721FD605586BBF1DD6091E3DA8
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

TSM Enerji ihalesi NTF EMR-5-30072026 PDF.bat

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 36c1b04627334fc449ad934a57898e230b52df637baa8d463cdcc536fa564563
MD5 be96d1f634baecfb4b41a6cc8acb7878
SHA1 facc90870951e81d59b5098d022d4b33eab151f2
SHA512 256b96e0150df2ebdfba300322a0c401aa777fce2b47e0d29b9955a7b8e61b118a53e251d0e0587e84fb02434ceb6e673890c00dfd81aed1ee2224a9e43e2d60
SSDEEP 24576:4neA9s3kPNiNbQzdt9LqfFW1YiJg/+J4iqZHyXLVAA+f:4eUs3GnZaFW/KGJ4iI8VAb
TLSH
T1A645D0AC3601B49FC457C9358EA4ECB4A6246CBB8307D20395D72DEFBA1D997CE141E2
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1225246

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

30072026_1606_30072026_TSM Enerji ihalesi NTF EMR-5-30072026 PDF.rar

TSM Enerji ihalesi NTF EMR-5-30072026 PDF.bat

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

30072026_1606_30072026_TSM Enerji ihalesi NTF EMR-5-30072026 PDF.rar

TSM Enerji ihalesi NTF EMR-5-30072026 PDF.bat

mscoree

dotnet