01102026_1433_01102026_SO#N472[.]J851[.]J852[.]J853[.]J854[.]N471[.]J855 - [TWN26100262][.]rar

General

Target
01102026_1433_01102026_SO#N472.J851.J852.J853.J854.N471.J855 - [TWN26100262].rar
Size 1.4MB
Sample261001-rwwtva1cmd
SHA256 d0915b179271c0bc2a74f2c69b4ee1dd5ad00adcda2a7dc958a5cf34a7457980
MD5 2a9074143bb166571b22a5e395b59664
SHA1 fb08a047a58108c5bd53505c63c8d52a8e9d5d19
SHA512 797cd860c970d7fdaa25c420a916e75756f101f070cded445205c95be2825d6cece2d0a075c686e81add3080e6a4e8731082b74de3272328a574fea25dd0ea7b
SSDEEP 24576:zMmeWrI2z47dza+4ttsrqIojbyE0fvbV3rvrbdw4dEa5LmwBJi9bkILwhAzzPqQC:zZrpCx4tDIIf03x3rvVdv4BHlvPhRI
TLSH
T10D653304154F3F36274625853437931EC11C7CBAA69F1BB2ACEF29BD2B50786B478A0B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/KELS2607576 TAX INVOICE - SKELS26007576_A - 0225535 (01-Oct-26).exe
unpack001/SO#N472.J851.J852.J853.J854.N471.J855 - [TWN26100262].docx.exe

File Explorer

01102026_1433_01102026_SO#N472.J851.J852.J853.J854.N471.J855 - [TWN26100262].rar

.rar 1.4MB
KELS2607576 TAX INVOICE - SKELS26007576_A - 0225535 (01-Oct-26).exe

.exe 1.0MB
SO#N472.J851.J852.J853.J854.N471.J855 - [TWN26100262].docx.exe

.exe 559KB

01102026_1433_01102026_SO#N472.J851.J852.J853.J854.N471.J855 - [TWN26100262].rar

SHA256 d0915b179271c0bc2a74f2c69b4ee1dd5ad00adcda2a7dc958a5cf34a7457980
MD5 2a9074143bb166571b22a5e395b59664
SHA1 fb08a047a58108c5bd53505c63c8d52a8e9d5d19
SHA512 797cd860c970d7fdaa25c420a916e75756f101f070cded445205c95be2825d6cece2d0a075c686e81add3080e6a4e8731082b74de3272328a574fea25dd0ea7b
SSDEEP 24576:zMmeWrI2z47dza+4ttsrqIojbyE0fvbV3rvrbdw4dEa5LmwBJi9bkILwhAzzPqQC:zZrpCx4tDIIf03x3rvVdv4BHlvPhRI
TLSH
T10D653304154F3F36274625853437931EC11C7CBAA69F1BB2ACEF29BD2B50786B478A0B
MD5 SHA1 SHA512 SSDEEP TLSH

Password

infected

KELS2607576 TAX INVOICE - SKELS26007576_A - 0225535 (01-Oct-26).exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 58d1bc7f41c9ca60f37070a0d6d9bae70e4d013a587aaa1a58ed95c2f3016991
MD5 3fd1a61b35d9d4408b12ad0bcb7b90e0
SHA1 66ae3b2c0e7da4162ae904dafc866ca9427fc2d3
SHA512 e727e6f4ae54a6636d1cc03b067b79485a52b595f54bfbcd48d190849833ca24129d8476e5abba57ef5cc35f05686eb93f60bd702bc5e39261eec036649e57dd
SSDEEP 24576:DtqMzEyY84maKUC7FqSVSo7olxCGWp0IX:RqGmbzKp7X7aCGK0I
TLSH
T1073502687399CF01D9B213F81BB1F13413B96D8EA421D2464EFA7DDB3826B442D587A3
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

1069102

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

SO#N472.J851.J852.J853.J854.N471.J855 - [TWN26100262].docx.exe

IMPHASH f34d5f2d4577ed6d9ceec516c1f5a744
SHA256 4bfe304587633df9d042ede596f957bace69740c37bc40a6635cabe101802c65
MD5 660dac63c924b53c5909e53146c94ead
SHA1 de5b69564eca9ab96fde4e46202236723ac54e19
SHA512 c187100c9e26e1751d9eb388a57549004f8ad81d6162d2a8f6c903e97f5e1303d85dda99afbc3ae2963c0ce9aa803ad29e26d60afadda5cf2e0ceff00d7f9504
SSDEEP 12288:AG5aW8X5x8QSZcC90+/TFH/YW3aJPdJP5uXxDT0Hvo:tZb/TFgWqJVJBuhDQw
TLSH
T1CEC4E11C73AADB02D4B607F55A71F27023FA7D4E9920D21B8FE5BDE73821B052948693
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

4

Entry point

577094

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

01102026_1433_01102026_SO#N472.J851.J852.J853.J854.N471.J855 - [TWN26100262].rar

KELS2607576 TAX INVOICE - SKELS26007576_A - 0225535 (01-Oct-26).exe

mscoree

dotnet

SO#N472.J851.J852.J853.J854.N471.J855 - [TWN26100262].docx.exe

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

01102026_1433_01102026_SO#N472.J851.J852.J853.J854.N471.J855 - [TWN26100262].rar

KELS2607576 TAX INVOICE - SKELS26007576_A - 0225535 (01-Oct-26).exe

mscoree

dotnet

SO#N472.J851.J852.J853.J854.N471.J855 - [TWN26100262].docx.exe

mscoree

dotnet