Payment Confirmation.exe
Classification: Malicious
Payment Confirmation.exe is a malicious file sample (application/x-dosexec). Linked to Guloader, Ecipekac malware. 52 sightings, last seen 2026-09-15.
Detection summary
- 0 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 0 contacted hosts
- 0 DNS requests
MITRE ATT&CK associations
Malware families: GULOADER (S0561) ECIPEKAC (S0624)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-15 01:45:06 | 2026-09-15 01:45:06 | malicious-activity | |
| SigLoader | ThreatFox Abuse.ch | 2024-07-09 18:06:07 | 2024-07-11 17:21:15 | S0624 Ecipekac | |
| GuLoader | MalwareBazaar Abuse.ch | 2024-07-09 09:44:55 | 2024-07-09 09:44:55 | malicious-activity | S0561 GuLoader |
Tags
win.sigloader evasiveSample information
- Filenames
- efbf7accf5b133eb834d6e906d9521a25ec21bdd891747b14c8df262f4744294, Payment Confirmation.exe
- File type
- application/x-dosexec
- MD5
6cdf0e571ca8d470bd5b40fbf99615b3- SHA-1
552ee3a5ef4a9c1afb59c39f1fb99ad682db9191- SHA-256
efbf7accf5b133eb834d6e906d9521a25ec21bdd891747b14c8df262f4744294- First indexed
- 2024-07-09 11:21:52
- Last updated
- 2026-09-18 10:58:30