insucar.pdf

Classification: Malicious

insucar.pdf is a trojan (application/x-dosexec). Detected by 30 antivirus engines. Linked to Bazar malware. 2 sightings, last seen 2022-01-24.

Detection summary

  • 30 antivirus detections
  • 0 IDS alerts
  • 0 processes observed
  • 0 contacted hosts
  • 0 DNS requests

MITRE ATT&CK associations

Malware families: BAZAR (S0534)

Blacklist sightings

Description Source First seen Last seen Labels MITRE ATT&CK
BazaLoader MalwareBazaar Abuse.ch 2022-01-24 16:39:31 2022-01-24 16:39:31 malicious-activity S0534 Bazar
Generic.Malware MalwareBazaar Abuse.ch 2022-01-24 16:39:31 2022-01-24 16:39:31 malicious-activity

Sample information

Filenames
insucar.pdf
File type
application/x-dosexec
MD5
8b61c7c621df7f47839717d5e0db7a4f
SHA-1
eeced10f9ec31511f9d68f60016a1fe27feab01b
SHA-256
89121a077c1de6eef1718279b77224609033daa1c6c037a4a1ceadb2c4ab2f60
First indexed
2022-01-24 18:15:07
Last updated
2026-04-26 15:45:12

Antivirus detections

EngineDetection
Elasticmalicious (high confidence)
ESET-NOD32a variant of Win64/Kryptik.CVX
KasperskyUDS:Trojan.Win64.Kryplod
SophosMal/Generic-S
MicrosoftTrojan:Win32/Sabsik.FL.B!ml
CynetMalicious (score: 100)
ALYacTrojan.Agent.Bazar
SangforTrojan.Win64.Kryplod.ky
K7AntiVirusTrojan ( 0058d6a61 )
BitDefenderTrojan.GenericKD.38708405
K7GWTrojan ( 0058d6a61 )
CyrenW64/Injector.ASL.gen!Eldorado
SymantecTrojan.Gen.2
AvastFileRepMalware
KasperskyTrojan.Win64.Kryplod.bdmv
MicroWorld-eScanTrojan.GenericKD.38708405
RisingTrojan.Kryplod!8.100A5 (CLOUD)
Ad-AwareTrojan.GenericKD.38708405
McAfee-GW-EditionArtemis!Trojan
FireEyeTrojan.GenericKD.38708405
EmsisoftTrojan.GenericKD.38708405 (B)
IkarusTrojan.Win64.Crypt
MAXmalware (ai score=84)
KingsoftWin32.Troj.Undef.(kcloud)
GDataTrojan.GenericKD.38708405
AhnLab-V3Trojan/Win.Sabsik.C4931871
McAfeeArtemis!8B61C7C621DF
CylanceUnsafe
FortinetW64/Kryptik.CVX!tr
AVGFileRepMalware