contratto.ppa
Classification: Malicious
contratto.ppa is a malicious file sample (application/vnd.ms-powerpoint). Linked to Ursnif malware. 2 sightings, last seen 2023-03-01.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: URSNIF (S0386)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Gozi | MalwareBazaar Abuse.ch | 2023-03-01 10:17:46 | 2023-03-01 10:17:46 | S0386 Ursnif |
Sample information
- Filenames
- d42cf1aa9737e9ee24d49805db194c72d799608174b6335bcb8d7a0798f9ddb3.ppt, contratto.ppa
- File type
- application/vnd.ms-powerpoint
- MD5
1b8cc3a6caf1f2a797e55661df69e1a5- SHA-1
b644882b78bcaa8d435ed6cd8f3718e70cd33766- SHA-256
d42cf1aa9737e9ee24d49805db194c72d799608174b6335bcb8d7a0798f9ddb3- First indexed
- 2023-03-01 10:17:46
- Last updated
- 2026-10-09 01:37:32