MalwareBazaar Database
You are currently viewing the MalwareBazaar entry for SHA256 139f216c3b3f6b873f55c84516368bf865d48ec05efd0c128ccf2d2290b8f7b6. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.
Database Entry
Gozi
Vendor detections: 7
| SHA256 hash: | 139f216c3b3f6b873f55c84516368bf865d48ec05efd0c128ccf2d2290b8f7b6 |
|---|---|
| SHA3-384 hash: | 9a2ca5444f453d32c10e65ab16f6439e98b83d6d7054015481e2e67f17cf4a17bbfdd8bfffa8b73f2b5b50fafc61ddeb |
| SHA1 hash: | 98eecf8c96dcd84e509fd2b9a99da3c24d4d55c3 |
| MD5 hash: | 684d176b151a30e3a6edd5a9c1bf81ca |
| humanhash: | cold-purple-fanta-charlie |
| File name: | Inv_555130_09_10_2023.pdf |
| Download: | download sample |
| Signature | Gozi |
| File size: | 99'648 bytes |
| First seen: | 2023-10-10 08:11:41 UTC |
| Last seen: | Never |
| File type: | |
| MIME type: | application/pdf |
| ssdeep | 3072:TXECZpz5wkicGhRizZ3aiOcBqGg1ASQRtJPF:TXECZpz5/MfC3ROcBfg1FOJd |
| TLSH | T1F0A3F1AE5BC9544CE8168551ED687F4885FCB3E3D5CC382201BB1D0EB1A2C65BB726CE |
| Reporter | Anonymous |
| Tags: | 91-212-166-74 Gozi pdf Ursnif |
Intelligence
File Origin
# of uploads :
1
# of downloads :
491
Origin country :
GBVendor Threat Intelligence
Detection(s):
Result
Verdict:
Clean
File Type:
PDF File
Verdict:
No Threat
Threat level:
2.5/10
Confidence:
100%
Verdict:
Suspicious
Labled as:
PDF/Phishing
Label:
Benign
Suspicious Score:
1.1/10
Score Malicious:
11%
Score Benign:
89%
Result
Threat name:
n/a
Detection:
clean
Classification:
n/a
Score:
5 / 100
Behaviour
Behavior Graph:
n/a
Threat name:
Document-PDF.Trojan.Heuristic
Status:
Malicious
First seen:
2023-10-10 08:12:06 UTC
File Type:
Document
Extracted files:
20
AV detection:
11 of 38 (28.95%)
Threat level:
2/5
Detection(s):
Suspicious file
Verdict:
Malicious
Please note that we are no longer able to provide a coverage score for Virus Total.
Threat name:
ursnif3
Score:
1.00
File information
The table below shows additional information about this malware sample such as delivery method and external references.
Malspam
Delivery method
Distributed via e-mail attachment
Comments
Login required
You need to login to in order to write a comment. Login with your abuse.ch account.