AWB & Invoice.pdf.gz

Classification: Malicious

AWB & Invoice.pdf.gz is a malicious file sample (application/x-rar). Linked to Turla activity. 3 sightings, last seen 2025-02-22.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: TURLA (G0010)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Snake ThreatFox Abuse.ch 2025-02-20 09:37:31 2025-02-22 09:43:24 G0010 Turla
SnakeKeylogger MalwareBazaar Abuse.ch 2022-05-18 13:43:58 2022-05-18 13:43:58 malicious-activity
Generic.Malware MalwareBazaar Abuse.ch 2022-05-18 13:43:58 2022-05-18 13:43:58 malicious-activity

Tags

win.snake ekans snakehose

Sample information

Filenames
AWB & Invoice.pdf.gz
File type
application/x-rar
MD5
35382e6d7d1c3dc1f79464ebffca6393
SHA-1
b3ab4f8e5d238ea6a79f2dbeb64787fa298bf7aa
SHA-256
05d74ee9a3d39dbd9e45bd8c265a7fdecaf9e1f8fe9f322127d4fe3b73cf04b8
First indexed
2022-05-18 15:15:10
Last updated
2026-10-03 17:18:40