PO_05964_pdf.exe
Classification: Malicious
PO_05964_pdf.exe is a trojan (application/x-dosexec). Detected by 44 antivirus engines. Linked to Guloader malware. 2 sightings, last seen 2022-06-21.
Detection summary
- 44 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: GULOADER (S0561)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| GuLoader | MalwareBazaar Abuse.ch | 2022-06-21 04:22:23 | 2022-06-21 04:22:23 | malicious-activity | S0561 GuLoader |
| Generic.Malware | MalwareBazaar Abuse.ch | 2022-06-21 04:22:23 | 2022-06-21 04:22:23 | malicious-activity |
Sample information
- Filenames
- PO_05964_pdf.exe
- File type
- application/x-dosexec
- MD5
4362696ab88e0849236d097bc3d92d39- SHA-1
8b4ff64c93cb53d53b739b51fd44bf3d35273beb- SHA-256
d12aced2f179361c780e3106df5e3d7dbf8ec142ff1d45450d4c6d955cff6da2- First indexed
- 2022-06-21 06:15:05
- Last updated
- 2026-10-11 05:37:35
Antivirus detections
| Engine | Detection |
|---|---|
| ALYac | Trojan.GenericKD.39841017 |
| AVG | NSIS:TrojanX-gen [Trj] |
| AhnLab-V3 | Trojan/Win.GuLoader.C5175436 |
| Alibaba | Trojan:Win32/Tnega.34fd6d60 |
| Antiy-AVL | Trojan/Win32.Tiggre |
| Arcabit | Trojan.Generic.D25FECF9 |
| Avast | NSIS:TrojanX-gen [Trj] |
| Avira | HEUR/AGEN.1338495 |
| BitDefender | Trojan.GenericKD.39841017 |
| Bkav | W32.AIDetectMalware |
| CrowdStrike | win/malicious_confidence_100% (W) |
| Cylance | unsafe |
| Cynet | Malicious (score: 100) |
| Cyren | W32/Ninjector.CQ.gen!Eldorado |
| DeepInstinct | MALICIOUS |
| ESET-NOD32 | NSIS/Injector.ASH |
| Elastic | malicious (high confidence) |
| Emsisoft | Trojan.GenericKD.39841017 (B) |
| F-Secure | Heuristic.HEUR/AGEN.1338495 |
| FireEye | Trojan.GenericKD.39841017 |
| Fortinet | NSIS/Injector.B9AB!tr |
| GData | Trojan.GenericKD.39841017 |
| Detected | |
| K7AntiVirus | Trojan ( 0059035d1 ) |
| K7GW | Trojan ( 0059035d1 ) |
| Kaspersky | HEUR:Trojan.Win32.Shelsy.gen |
| Lionic | Trojan.Win32.Shelsy.4!c |
| MAX | malware (ai score=89) |
| McAfee | RDN/Generic.dx |
| McAfee-GW-Edition | BehavesLike.Win32.Generic.dh |
| MicroWorld-eScan | Trojan.GenericKD.39841017 |
| Microsoft | Trojan:Win32/Tnega.BK!MTB |
| Panda | Trj/Chgt.AB |
| Sangfor | Trojan.Win32.Tnega.Vbp6 |
| Sophos | Mal/Generic-S |
| Symantec | Trojan Horse |
| Tencent | Win32.Trojan.Shelsy.Rimw |
| VBA32 | Trojan.GuLoader |
| VIPRE | Trojan.GenericKD.39841017 |
| Webroot | W32.Malware.Gen |
| Xcitium | Malware@#ipzmf670qoq7 |
| Yandex | Trojan.Igent.bYdPe9.1 |
| Zillya | Trojan.Shelsy.Win32.599 |
| ZoneAlarm | HEUR:Trojan.Win32.Shelsy.gen |