MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 25cc0cb6a3ae2ee5b4c0a3be4d6c21facff17d251bd60f801fba6e82fd4b3bd7. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	25cc0cb6a3ae2ee5b4c0a3be4d6c21facff17d251bd60f801fba6e82fd4b3bd7
SHA3-384 hash:	1c6bfdccd695628f718b3360c098656927bc717e49311b9e99ecb12d8583f16ed26ca7131b30962bd80e5a5209375e67
SHA1 hash:	d806f766317e2d6464317d8955c14be25b727ec8
MD5 hash:	832d88a2d133db509a7a30e0a0c5a99b
humanhash:	muppet-moon-ceiling-beer
File name:	invoice-1623385214.pdf
Download:	download sample
File size:	52'213 bytes
First seen:	2025-01-08 08:05:31 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	384:qUy6SDvX7hWFcTPm/K7Uzzzzzzzzzzzzzzzzz3Qzwx7HsX/9sT:qUy6ST7hWGTO/KNzwxLoi
TLSH	T16E338075F7D7E3881B03AA5C583D3D3797A685D004D4923B8A6B0C4AA280F7326273BC
Magika	pdf
Reporter	JAMESWT_WT
Tags:	booking pdf Spam-ITA

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

325

Origin country :

IT

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.PDF.DropperX-gen.18309.16094.UNOFFICIAL

Alert

Create hunting rule

CyberFortress Malicious

Verdict:

Malicious

Score:

92.5%

Link:

https://cyber-fortress.com/docs/result/index.php?id=677e32adffdcee13ec86f92c

Tags:

extens remo blic

DocGuard Clean

Result

Verdict:

Clean

File Type:

PDF File

Link:

https://app.docguard.net/25cc0cb6a3ae2ee5b4c0a3be4d6c21facff17d251bd60f801fba6e82fd4b3bd7/results/dashboard

FileScan.IO Suspicious

Verdict:

Suspicious

Threat level:

  5/10

Confidence:

100%

Tags:

javascript macros phishing

Link:

https://www.filescan.io/uploads/677e31ea5b67424756822e6a/reports/3eddaa39-2022-4b8c-8808-446df1c9c3d8/overview

Hybrid Analysis Pdf/malicious_confidence_70%

Verdict:

Malicious

Labled as:

Pdf/malicious_confidence_70%

Link:

https://www.hybrid-analysis.com/sample/25cc0cb6a3ae2ee5b4c0a3be4d6c21facff17d251bd60f801fba6e82fd4b3bd7

inlyse Malware.AI Malicious

Label:

Malicious

Suspicious Score:

5.7/10

Score Malicious:

57%

Score Benign:

43%

Link:

https://www.malware.ai/gui/files/?id=c1c63da2-5470-48d4-9bea-306407f9f406

Joe Sandbox clean

Result

Threat name:

n/a

Detection:

clean

Classification:

n/a

Score:

0 / 100

Link:

https://www.joesandbox.com/analysis/1585781

Behaviour

Behavior Graph:

n/a

Nucleon Malprob Malware

Score:

100%

Verdict:

Malware

File Type:

PDF

Link:

https://malprob.io/report/25cc0cb6a3ae2ee5b4c0a3be4d6c21facff17d251bd60f801fba6e82fd4b3bd7

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/25cc0cb6a3ae2ee5b4c0a3be4d6c21facff17d251bd60f801fba6e82fd4b3bd7/

ReversingLabs TitaniumCloud Document-PDF.Trojan.Pidief

Threat name:

Document-PDF.Trojan.Pidief

Alert

Create hunting rule

Status:

Malicious

First seen:

2025-01-08 08:05:12 UTC

File Type:

Document

Extracted files:

8

AV detection:

13 of 24 (54.17%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=exgaznvdvyxolngauo7e23bb7lh7c7jfdpla7aa7xjxif7klhplq._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.