PCG_124th_Anniversary_Event_Documents_Office_of_the_President_23102025-Archive.zip

Classification: Malicious

PCG_124th_Anniversary_Event_Documents_Office_of_the_President_23102025-Archive.zip is a malicious file sample. Linked to Apt41 activity.

Detection summary

  • 38 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: APT41 (G0096)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
APT41 MalwarePatrol 2026-03-03 17:52:11 2026-03-03 18:06:30 malicious-activity G0096 APT41
Generic.Malware MalwareBazaar Abuse.ch 2025-11-07 18:16:51 2025-11-07 18:16:51 malicious-activity

Tags

apt41 grayfly earth baku barium bronze export g0096 ta415 amaranth-dragon red kelpie lead bronze atlas mission2025 hoodoo wicked panda brass typhoon blackfly amoeba leopard typhoon double dragon g0044

Sample information

Filenames
PCG_124th_Anniversary_Event_Documents_Office_of_the_President_23102025-Archive.zip
File type
zip
MD5
8e130c2604516ccd4bcba72cc6549649
SHA-1
d70bad36a4060f93a3c5c9092bbf299c463a1451
SHA-256
495cb43f3c2e3abd298a3282b1cc5da4d6c0d84b73bd3efcc44173cca950273c
First indexed
2025-11-07 18:16:51
Last updated
2026-09-03 02:19:48

Antivirus detections

EngineDetection
AhnLab-V3Trojan/LNK.Runner
Antiy-AVLTrojan/BAT.Agent
ArcabitTrojan.Generic.D4A1EE15
AviraLNK/avi.Agent.98d974
BitDefenderTrojan.GenericKD.77721109
CTXzip.trojan.generic
ClamAVWin.Trojan.Suspect-34
CynetMalicious (score: 99)
ESET-NOD32LNK/Agent.AKX trojan
EmsisoftTrojan.GenericKD.77721109 (B)
F-SecureMalware.LNK/avi.Agent.98d974
FortinetLNK/Agent.AKX!tr
GDataTrojan.GenericKD.77721109
IkarusTrojan.BAT.Agent
KingsoftWin32.Troj.Undef.a
LionicTrojan.ZIP.Agent.4!c
MicroWorld-eScanTrojan.GenericKD.77721109
SymantecTrojan.Gen.NPE
TencentBat.Trojan.Agent.Dnhl
TrendMicroTROJ_FRS.0NA103KO25
TrendMicro-HouseCallTROJ_FRS.0NA103KO25
VIPRETrojan.GenericKD.77721109
VaristLNK/Agent.PB
ZoneAlarmTroj/LnkObf-T
ZonerProbably Heur.LNKScript
alibabacloudTrojan:Unknow/Leonem.Gen
AVGOther:Malware-gen [Trj]
AvastOther:Malware-gen [Trj]
AviraTR/SNH
F-SecureTrojan.TR/SNH
KasperskyHEUR:Trojan.BAT.Agent.gen
McAfeeDti!495CB43F3C2E
RisingTrojan.Agent/BAT!9.469EC (XSE:WFNFX0JBVDrMWjWrdpguEM9b6WN5F0M0)
SkyhighBAT/Agent.ga
SophosTroj/LnkObf-T
TrellixENSLNK/Agent.c
VBA32Trojan.Link.CmdRunner
ZillyaTrojan.Agent.Script.1782105