MalwareBazaar Database

You are currently viewing the MalwareBazaar entry for SHA256 d75d839aee53a5afeaf7fdd8db7f8e2b828042c9ca058cd280f8a509e0776b46. While MalwareBazaar tries to identify whether the sample provided is malicious or not, there is no guarantee that a sample in MalwareBazaar is malicious.

Database Entry

SHA256 hash:	d75d839aee53a5afeaf7fdd8db7f8e2b828042c9ca058cd280f8a509e0776b46
SHA3-384 hash:	3aa8f122ab8709355f3418ac8c52e0f7f7584fff0306e1df5010eda502b6284ceba849bc1e6b400b33cd486a342b2ca5
SHA1 hash:	f8402908da2fce4d72fcb3579402983ba0b26782
MD5 hash:	9ce4de63ff4c8d5e444b5822b12a68cf
humanhash:	ceiling-echo-blue-jupiter
File name:	invoice-1645080830.pdf
Download:	download sample
File size:	40'420 bytes
First seen:	2026-04-27 06:30:50 UTC
Last seen:	Never
File type:	pdf
MIME type:	application/pdf
ssdeep	384:+nx241osPjFLjhdlCxJPxncS45sJflFbfhfhfhfhfTZZZZZZZZ651i5J:6x24lpdCxJZnjWsh3bfhfhfhfhfm5AT
TLSH	T189033D538C985E43A878C7A9BF470F6D6B497D4EA4827AFF302E0D927F312605C0D16A
Magika	pdf
Reporter	JAMESWT_WT
Tags:	accounts-bookings-vercel-app booking pdf

Intelligence

---

File Origin

# of uploads :

1

# of downloads :

419

Origin country :

IT

Vendor Threat Intelligence

ACCE Unknown

No detections

CyberFortress Malicious

Verdict:

Malicious

Score:

70%

Link:

https://cyber-fortress.com/docs/result/index.php?id=69ef02c34aed15d07930f7b2

Tags:

ransomware shell sage

DocGuard Malicious

Result

Verdict:

Malicious

File Type:

PDF File

Link:

https://app.docguard.net/d75d839aee53a5afeaf7fdd8db7f8e2b828042c9ca058cd280f8a509e0776b46/results/dashboard

FileScan.io

Gathering data

Hybrid Analysis Unknown

Verdict:

Unknown

Link:

https://www.hybrid-analysis.com/sample/d75d839aee53a5afeaf7fdd8db7f8e2b828042c9ca058cd280f8a509e0776b46

inlyse Malware.AI Malicious

Label:

Malicious

Suspicious Score:

6.1/10

Score Malicious:

62%

Score Benign:

38%

Link:

https://www.malware.ai/gui/files/?id=bc09bf92-a22f-4d87-b6dc-1d4a669e7ddb

Kaspersky OpenTIP Unknown

Verdict:

Unknown

File Type:

pdf

Link:

https://opentip.kaspersky.com/d75d839aee53a5afeaf7fdd8db7f8e2b828042c9ca058cd280f8a509e0776b46/results?tab=lookup

Nucleon Malprob Malware

Score:

99%

Verdict:

Malware

File Type:

PDF

Link:

https://malprob.io/report/d75d839aee53a5afeaf7fdd8db7f8e2b828042c9ca058cd280f8a509e0776b46

Malva.RE

Gathering data

CERT.PL MWDB

Detection:

n/a

Link:

https://mwdb.cert.pl/sample/d75d839aee53a5afeaf7fdd8db7f8e2b828042c9ca058cd280f8a509e0776b46/

ReversingLabs TitaniumCloud Win32.Trojan.PhishLeonem

Threat name:

Win32.Trojan.PhishLeonem

Alert

Create hunting rule

Status:

Malicious

First seen:

2026-04-26 22:02:04 UTC

File Type:

Document

Extracted files:

6

AV detection:

6 of 24 (25.00%)

Threat level:

  5/5

Spamhaus Hash Blocklist Suspicious file

Detection(s):

Suspicious file

Link:

https://check.spamhaus.org/check/?searchterm=25oyhgxokos272xx7xmnw74ofobiaqwjzicyzuua7csqtydxnnda._file

VirusTotal

Please note that we are no longer able to provide a coverage score for Virus Total.

YOROI YOMI Suspicious File

Threat name:

Suspicious File

Score:

0.60

Link:

https://yomi.yoroi.company/submissions/d75d839aee53a5afeaf7fdd8db7f8e2b828042c9ca058cd280f8a509e0776b46