Villa_Interior_Design_Construction_Request.bat

Classification: Malicious

Villa_Interior_Design_Construction_Request.bat is a trojan (Unicode text). Detected by 22 antivirus engines. Linked to Koadic malware.

Detection summary

  • 22 antivirus detections
  • 2 IDS alerts
  • 0 processes observed
  • 6 contacted hosts
  • 6 DNS requests

MITRE ATT&CK associations

Malware families: KOADIC (S0250)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Koadic MalwareBazaar Abuse.ch 2026-05-15 09:26:16 2026-05-15 09:26:16 malicious-activity S0250 Koadic
Generic Malware Hybrid-Analysis 2026-05-14 10:45:04 2026-05-14 10:45:04

Sample information

Filenames
Villa_Interior_Design_Construction_Request.bat
File type
Unicode text, UTF-8 text, with very long lines (32 ...
MD5
fe537d6afd83f8e9e7f0402209c98a08
SHA-1
ffc96640e5ba9c5ed126abf671e4ce6108ed8fdb
SHA-256
01593287286f40bf5305f2d54962fdbcb8a4b6c4a5c0912b6f2e5826bea9c741
First indexed
2026-05-14 09:42:59
Last updated
2026-09-02 01:40:50

Antivirus detections

EngineDetection
ALYacTrojan.Downloader.4227
AVGOther:Malware-gen [Trj]
Antiy-AVLTrojan/Win32.Qwexlafiba
ArcabitTrojan.Downloader.D1083
AvastOther:Malware-gen [Trj]
AviraTR/Malware
BitDefenderTrojan.Downloader.4227
CTXunknown.trojan.qwexlafiba
CynetMalicious (score: 99)
EmsisoftTrojan.Downloader.4227 (B)
F-SecureTrojan.TR/Malware
GDataTrojan.Downloader.4227
GoogleDetected
KasperskyHEUR:Packed.Bat.Agent.gen
McAfeeDti!01593287286F
MicroWorld-eScanTrojan.Downloader.4227
SymantecTrojan.Gen.NPE
TencentBat.Packed.Agent.Lzfl
VIPRETrojan.Downloader.4227
VaristABTrojan.ZFGP-
XcitiumMalware@#1a91wl0uw1rnb
alibabacloudTrojan:Unknow/Qwexlafiba.Gen

Network contacts

140.82.112.4 185.199.109.133 34.117.59.81 149.154.166.110 142.251.219.14 142.251.218.193

DNS requests

api.telegram.org github.com ipinfo.io raw.githubusercontent.com script.google.com script.googleusercontent.com