rPROFORMAINVOICE-PO_ATS_1036pdf.exe
Classification: Malicious
rPROFORMAINVOICE-PO_ATS_1036pdf.exe is a malicious file sample (application/x-dosexec). Linked to Turla activity.
Detection summary
- 0 antivirus detections
- 3 IDS alerts
- 0 processes observed
- 2 contacted hosts
- 2 DNS requests
MITRE ATT&CK associations
Intrusion sets: TURLA (G0010)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-09-16 08:45:05 | 2026-09-16 08:45:05 | malicious-activity | |
| Snake | ThreatFox Abuse.ch | 2025-02-20 09:36:28 | 2025-02-22 09:48:56 | G0010 Turla | |
| SnakeKeylogger | MalwareBazaar Abuse.ch | 2024-09-25 12:22:51 | 2024-09-25 12:22:51 | malicious-activity |
Tags
win.snake ekans snakehose infostealer keyloggerSample information
- Filenames
- fb32ee963d4a3a9ee628b7953fd14fb98fe1257946ce05c6e922005d05cdac74, rPROFORMAINVOICE-PO_ATS_1036pdf.exe
- File type
- application/x-dosexec
- MD5
d5a6193b01c8b4f4a1d70de986f2581a- SHA-1
83146988eefd85c295e43336021a82bdae3e03fc- SHA-256
fb32ee963d4a3a9ee628b7953fd14fb98fe1257946ce05c6e922005d05cdac74- First indexed
- 2024-09-25 14:20:01
- Last updated
- 2026-09-16 08:45:05