MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 a23bd8eab005a0c7759ffa344b55a3e1fd83a871817d51621c97eee0b511b3da. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	a23bd8eab005a0c7759ffa344b55a3e1fd83a871817d51621c97eee0b511b3da
SHA3-384 hash:	645dbfb5ee399892b0644f1446bf89bc96f6fb297198b4342f5958a5e2adafedfb71aff3992ba5c85bac8d8b73bf9551
SHA1 hash:	5fe202ed78618d14675cbdac6fd176848f74cc30
MD5 hash:	1009fac37240f16e01e552cf87e61dde
humanhash:	lima-leopard-item-fix
File name:	a23bd8eab005a0c7759ffa344b55a3e1fd83a871817d51621c97eee0b511b3da.pdf
Download:	download sample
File size:	37'438 bytes
First seen:	2026-04-13 07:48:15 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	768:5AUTIkUeSiLBLwMdA9twUuvJZBw9xwdgs5nNjII3jsR0HPUtQqp4wRquFg3Ku4Cy:6UT+5AeIABxwqQNcI3jsR0vU+S4wRquj
TLSH	T180F2D62D275DDC9CE81AC590C23BB69D5F0EF0A29FD8240A143E5261314DD8ABECB6D7
Magika	pdf
Reporter	JAMESWT_WT
Tags:	pdf refundonex-com

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

378

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Clean

Verdict:

Clean

Score:

89.3%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69dc9fe545787c53e5393bfc

Tags:

n/a

DocGuard Clean

Result

Verdict:

Clean

File Type:

PDF File

Link:

https://app.docguard.net/a23bd8eab005a0c7759ffa344b55a3e1fd83a871817d51621c97eee0b511b3da/results/dashboard

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/a23bd8eab005a0c7759ffa344b55a3e1fd83a871817d51621c97eee0b511b3da

inlyse Malware.AI Benign

Label:

Benign

Suspicious Score:

/10

Score Malicious:

%

Score Benign:

1%

Link:

https://www.malware.ai/gui/files/?id=050ed0fd-b93b-4915-badb-dc4d6a69a3ea

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

pdf

First seen:

2026-04-11T12:55:00Z UTC

Last seen:

2026-04-13T13:15:00Z UTC

Hits:

~100

Link:

https://opentip.kaspersky.com/a23bd8eab005a0c7759ffa344b55a3e1fd83a871817d51621c97eee0b511b3da/results?tab=lookup

Nucleon Malprob Benign

Score:

0%

Verdict:

Benign

File Type:

PDF

Link:

https://malprob.io/report/a23bd8eab005a0c7759ffa344b55a3e1fd83a871817d51621c97eee0b511b3da

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/a23bd8eab005a0c7759ffa344b55a3e1fd83a871817d51621c97eee0b511b3da/

ReversingLabs TitaniumCloud Document.Trojan.Heuristic

Threat name:

Document.Trojan.Heuristic

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-04-11 17:57:59 UTC

File Type:

Document

Extracted files:

30

AV detection:

3 of 24 (12.50%)

Threat level:

  2/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=ui55r2vqawqmo5m77i2ewvnd4h6yhkdrqf6vcyq4s7xobnirwpna._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Legit

Threat name:

Legit

Score:

0.25

Link:

https://yomi.yoroi.company/submissions/a23bd8eab005a0c7759ffa344b55a3e1fd83a871817d51621c97eee0b511b3da