ekstre.pdf.exe

Classification: Malicious

ekstre.pdf.exe is a malicious file sample (Windows executable). Linked to Guloader, Remcos malware. Reported by 4 threat sources, last seen 2026-06-22.

Detection summary

  • 0 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: GULOADER (S0561) REMCOS (S0332) CROSSRAT (S0235)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
CrossRAT ThreatFox Abuse.ch 2026-06-22 16:57:10 2026-06-22 17:29:24 S0235 CrossRAT
Generic Malware Hybrid-Analysis 2026-06-22 08:45:04 2026-06-22 08:45:04 malicious-activity
Guloader Triage 2026-06-22 08:15:22 2026-06-22 08:15:22 malicious-activity S0561 GuLoader
RemcosRAT MalwareBazaar Abuse.ch 2026-06-22 08:02:23 2026-06-22 08:02:23 malicious-activity S0332 Remcos

Tags

guloader remcos 32bibin adware discovery downloader persistence ransomware rat spyware jar.crossrat trupto

Sample information

Filenames
ekstre.pdf.exe, _2e4845a187fa3a02cac09ca22d314d3f924c8bf63bf877d23e8645f7bac8cf55.exe, 2e4845a187fa3a02cac09ca22d314d3f924c8bf63bf877d23e8645f7bac8cf55.bin
File type
PE32 executable for MS Windows 4.00 (GUI), Intel i ...
MD5
572ee6e985c588c4a66fe7d5ab13ae05
SHA-1
3b1dec5c00a60dd99a41e9085f8956e2fee6f8c8
SHA-256
2e4845a187fa3a02cac09ca22d314d3f924c8bf63bf877d23e8645f7bac8cf55
First indexed
2026-06-22 08:02:23
Last updated
2026-09-11 11:04:12