Musterino_96123931_Ekno_1_20215124531_ekstre.pdf.exe

Classification: Malicious

Musterino_96123931_Ekno_1_20215124531_ekstre.pdf.exe is a trojan (application/x-dosexec). Detected by 23 antivirus engines. Linked to Turla activity.

Detection summary

  • 23 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Intrusion sets: TURLA (G0010)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
Snake ThreatFox Abuse.ch 2025-02-20 09:40:36 2025-02-22 09:26:31 G0010 Turla
SnakeKeylogger Abuse.ch 2021-12-01 12:35:37 2021-12-01 12:35:37 malicious-activity
Generic.Malware Abuse.ch 2021-12-01 12:35:37 2021-12-01 12:35:37 malicious-activity

Tags

win.snake ekans snakehose

Sample information

Filenames
Musterino_96123931_Ekno_1_20215124531_ekstre.pdf.exe
File type
application/x-dosexec
MD5
d5bb23fac11ce301ead3633a17023be3
SHA-1
f6d680dda6e786f73a5172e50e26dc794336bb35
SHA-256
2261cc4b5ebba0be2abb1cc13a4d4be2990bb4f627e546172429a5ad0478f829
First indexed
2021-12-01 13:15:11
Last updated
2026-09-11 02:24:54

Antivirus detections

EngineDetection
Elasticmalicious (high confidence)
MicroWorld-eScanTrojan.GenericKD.47529570
CAT-QuickHealTrojan.YakbeexMSIL.ZZ4
CrowdStrikewin/malicious_confidence_60% (D)
CyrenW32/MSIL_Kryptik.GFI.gen!Eldorado
SymantecScr.Malcode!gdn30
ESET-NOD32a variant of MSIL/Kryptik.ADPQ
APEXMalicious
KasperskyHEUR:Trojan.MSIL.Taskun.gen
BitDefenderTrojan.GenericKD.47529570
EmsisoftTrojan.GenericKD.47529570 (B)
DrWebTrojan.PackedNET.1124
McAfee-GW-EditionBehavesLike.Win32.Fareit.hc
SophosMal/Generic-R
SentinelOneStatic AI - Suspicious PE
GDataMSIL.Trojan-Spy.Snake.DOY3C0
KingsoftWin32.Troj.Generic_a.a.(kcloud)
MicrosoftTrojan:MSIL/AgentTesla.DPC!MTB
CynetMalicious (score: 100)
McAfeePWS-FCUF!D5BB23FAC11C
MalwarebytesTrojan.MalPack.PNG.Generic
FortinetMalicious_Behavior.SB
MaxSecureTrojan.Malware.300983.susgen