MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 690e944d5620ca62def957865ee4d52d6a3ff155d1ef3ff6fd59b673ef9f8735. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	690e944d5620ca62def957865ee4d52d6a3ff155d1ef3ff6fd59b673ef9f8735
SHA3-384 hash:	8d8566ddc69f01b96ecadb13638c242c5f48f74290cf340ec8edd435e0ebf5264fb48e848a0678202ef8f2d467f1e8a5
SHA1 hash:	7ddd0098e59782da5061a6f0d97c893a0b9334f7
MD5 hash:	aa02bbc9809639caf55768699c06bb9d
humanhash:	hydrogen-purple-apart-oklahoma
File name:	Inv_1384_from_BBP Accounting_625182_12970.pdf
Download:	download sample
Signature	Gozi Alert Create hunting rule
File size:	38'019 bytes
First seen:	2023-10-10 08:30:45 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	768:hBQoSQ3Aid+woTuNDIZehmb4FYzolkOjA0L/il2yoXWLOnI+X2arJfx8f:3Qo7+w61ehmbjzek0Ol2yozIxarNm
TLSH	T10F03C04AA694ACEAC4D545B3C43B3942B778B13306C4B89D6C6C70CB3F0A975D9C6AC3
Reporter	0x_malw_research
Tags:	91-212-166-74 Gozi intuit pdf Ursnif

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

522

Origin country :

GB

Vendor Threat Intelligence

ClamAV Detected

Detection(s):

SecuriteInfo.com.PDF.PhishingX-gen.14531.13147.UNOFFICIAL

Alert

Create hunting rule

DocGuard Clean

Result

Verdict:

Clean

File Type:

PDF File

Link:

https://app.docguard.net/690e944d5620ca62def957865ee4d52d6a3ff155d1ef3ff6fd59b673ef9f8735/results/dashboard

FileScan.io

Gathering data

Hybrid Analysis Pdf/malicious_confidence_60%

Verdict:

Malicious

Labled as:

Pdf/malicious_confidence_60%

Link:

https://www.hybrid-analysis.com/sample/690e944d5620ca62def957865ee4d52d6a3ff155d1ef3ff6fd59b673ef9f8735

inlyse Malware.AI Benign

Label:

Benign

Suspicious Score:

2.3/10

Score Malicious:

23%

Score Benign:

77%

Link:

https://www.malware.ai/gui/files/?id=b17174f6-e5a0-41a5-8506-c0845d72bbc0

Joe Sandbox malicious

Result

Threat name:

n/a

Detection:

malicious

Classification:

n/a

Score:

48 / 100

Link:

https://www.joesandbox.com/analysis/1322647

Signature

Multi AV Scanner detection for domain / URL

Behaviour

Behavior Graph:

Download SVG

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/690e944d5620ca62def957865ee4d52d6a3ff155d1ef3ff6fd59b673ef9f8735/

ReversingLabs TitaniumCloud Document-PDF.Trojan.Heuristic

Threat name:

Document-PDF.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2023-10-10 08:31:05 UTC

File Type:

Document

Extracted files:

6

AV detection:

12 of 38 (31.58%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=nehjitkwedfgfxxzk6df5zgvfvvd74kv2hxt75x5lg3hh347q42q._file

VMRay Malicious

Verdict:

Malicious

Link:

https://www.vmray.com/analyses/_mb/690e944d5620/report/overview.html

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI ursnif3

Threat name:

ursnif3

Score:

1.00

Link:

https://yomi.yoroi.company/submissions/690e944d5620ca62def957865ee4d52d6a3ff155d1ef3ff6fd59b673ef9f8735