hesap hareketi-01.pdf.exe

Classification: Malicious

hesap hareketi-01.pdf.exe is a trojan (Windows executable, 44.5 KB). Flagged by 27% of antivirus engines (70 detections). Linked to Turla activity.

Detection summary

  • 70 antivirus detections (27% detection ratio)
  • 0 IDS alerts
  • 1 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: TURLA (G0010)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Snake ThreatFox Abuse.ch 2025-02-20 09:40:29 2025-02-22 09:27:10 G0010 Turla
Spyware VM-Ray 2023-11-08 09:22:34 2023-11-08 11:22:29
Backdoor VM-Ray 2023-11-08 09:22:34 2023-11-08 11:22:29
Generic Malware Hybrid-Analysis 2023-11-08 08:15:05 2023-11-08 08:15:05

Tags

win.snake ekans snakehose

Sample information

Filenames
211bbf7b08bd07a5c74d049e67d35a428497a8a30b180d8172cd9a74f8278887.exe, hesap hareketi-01.pdf.exe
File type
PE32 executable (GUI) Intel 80386 Mono/.Net assemb ...
Size
45568 bytes
MD5
418aa28c488809dc336199188ac90b5e
SHA-1
a9f9f5d5f098c08a66eb2a2e1be2cd5ff2d654e1
SHA-256
211bbf7b08bd07a5c74d049e67d35a428497a8a30b180d8172cd9a74f8278887
First indexed
2023-11-08 07:57:10
Last updated
2026-09-24 04:04:12

Antivirus detections

EngineDetection
ALYacGen:Variant.Marsilia.83737
APEXMalicious
AVGWin32:CrypterX-gen [Trj]
AhnLab-V3Trojan/Win.Generic.C5539479
AlibabaTrojanDownloader:MSIL/Seraph.b7250caf
ArcabitTrojan.Marsilia.D14719
AvastWin32:CrypterX-gen [Trj]
AviraTR/Dldr.Agent.kdxuo
BitDefenderGen:Variant.Marsilia.83737
BkavW32.Common.91A51D19
CAT-QuickHealTrojan.Ghanarava.1732761631c90b5e
CTXexe.trojan.msil
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
DeepInstinctMALICIOUS
DrWebTrojan.Packed2.45891
ESET-NOD32a variant of MSIL/TrojanDownloader.Agent.PWH
Elasticmalicious (high confidence)
EmsisoftGen:Variant.Marsilia.83737 (B)
F-SecureTrojan.TR/Dldr.Agent.kdxuo
FireEyeGen:Variant.Marsilia.83737
FortinetMSIL/Kryptik.AJEE!tr
GDataGen:Variant.Marsilia.83737
GoogleDetected
IkarusTrojan.MSIL.Agent
K7AntiVirusTrojan-Downloader ( 005adb5c1 )
K7GWTrojan-Downloader ( 005adb5c1 )
KasperskyHEUR:Trojan-Downloader.MSIL.Seraph.gen
KingsoftWin32.Troj.Undef.a
LionicTrojan.Win32.Seraph.a!c
MalwarebytesMalware.AI.3467327951
MaxSecureTrojan.Malware.74570710.susgen
McAfeeDownloader-FCPQ!418AA28C4888
McAfeeDti!211BBF7B08BD
MicroWorld-eScanGen:Variant.Marsilia.83737
MicrosoftTrojan:Win32/Znyonm
NANO-AntivirusTrojan.Win32.Seraph.kdkhod
Paloaltogeneric.ml
PandaTrj/Chgt.AD
RisingMalware.Obfus/[email protected] (RDM.MSIL2:KrQMpAkibvvHb4we9Irsrg)
SangforDownloader.Msil.Seraph.V7nu
SentinelOneStatic AI - Malicious PE
SkyhighDownloader-FCPQ!418AA28C4888
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TencentMalware.Win32.Gencirc.13f4ce45
TrendMicroTrojan.MSIL.SERAPH.BH
TrendMicro-HouseCallTrojan.MSIL.SERAPH.BH
VBA32TScope.Trojan.MSIL
VIPREGen:Variant.Marsilia.83737
VaristW32/Agent.ENS.gen!Eldorado
ViRobotTrojan.Win.Z.Agent.45568.BEA
VirITTrojan.Win32.Genus.UBV
XcitiumMalware@#31iv5ttguuu13
YandexTrojan.Igent.b1brwx.2
ZillyaDownloader.Agent.Win32.533719
ZonerTrojan.Win32.165107
huorongTrojanDownloader/MSIL.Agent.xd
MalwarebytesTrojan.MalPack.PNG
KasperskyUDS:Trojan-Downloader.MSIL.Seraph.gen
RisingMalware.Obfus/[email protected] (RDM.MSIL2:KrQMpAkibvvHb4we9Irsrg)
F-SecureHeuristic.HEUR/AGEN.1323691
AviraHEUR/AGEN.1323691
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
ZoneAlarmUDS:Trojan-Downloader.MSIL.Seraph.gen
CynetMalicious (score: 100)
MaxSecureTrojan.Malware.300983.susgen
BitDefenderThetaGen:NN.ZemsilCO.36792.cm0@a8awZnl
AVGCrypterX-gen [Trj]
AvastCrypterX-gen [Trj]

Process list

NameCommand line
hesaphareketi-01.pdf.exe