SUSPICIOUS — dexibazorawasiwo.pdf

SUSPICIOUS — dexibazorawasiwo.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 4 of 53 detection engines flagged it.

Identification

SHA-256: 086a3a51bb543cd0873914f0d808c2723524b703b9c876f29177f8c10b660959
SHA-1: 478d6f3bbf916893f0cd276fbf94c87f89d90a41
MD5: 3a5a3c9b282f6bad9a0596cbaeb9730b
ssdeep: 768:igGzpDNpJyFcv7bY/oOUM8Kpr/nTqLpXlUJk7wpKOHvGA8ngT+9zx87dY:/GF5pxUTTk73WuA8ngT+9zq7dY
TLSH: T166317DF31093FD8C7B8F9B03ADAB145AA087D78961369650449C732CD2BC6EC7E50961
Submitted as: dexibazorawasiwo.pdf
File type: pdf · Size: 42710 bytes
Verdict: suspicious (44/100)

Detections (4 of 53 engines)

MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
Microsoft Defender: flagged
Emsisoft (Emergency Kit): PDF.Spam.Heur.1
Kaspersky (KVRT): HEUR:Trojan.Script.Generic

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

Embedded network infrastructure: https://cctraff.ru/strik?keyword=hy4300+multimeter+user+manual, https://cdn.shopify.com/s/files/1/0436/5382/4677/files/descargar_facebook_apk_uptodown.pdf, https://cdn.shopify.com/s/files/1/0437/6494/0961/files/the_wolves_of_mercy_falls_quotes.pdf - static signal, weight 0.35, confidence 0.60
Document active content: uri-action - static signal, weight 0.30, confidence 0.60
Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis (windows)

0 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

none

Embedded URLs

https://cctraff.ru/strik?keyword=hy4300+multimeter+user+manual
https://cdn.shopify.com/s/files/1/0436/5382/4677/files/descargar_facebook_apk_uptodown.pdf
https://cdn.shopify.com/s/files/1/0437/6494/0961/files/the_wolves_of_mercy_falls_quotes.pdf
https://cdn.shopify.com/s/files/1/0428/1666/7814/files/bobby_debarge_sister.pdf
https://cdn.shopify.com/s/files/1/0498/7571/4209/files/time_to_party_meme.pdf
https://mojivimimujovo.weebly.com/uploads/1/3/0/8/130874437/038885c85ecf8f0.pdf
https://jimigafekalese.weebly.com/uploads/1/3/1/4/131407537/mabepoze-nesezopimufus-woxixoluwel-suvul.pdf
https://cdn.shopify.com/s/files/1/0438/2910/0701/files/27425282364.pdf
https://cdn.shopify.com/s/files/1/0494/4560/1447/files/provera_reviews_for_irregular_periods.pdf
https://cdn.shopify.com/s/files/1/0434/0016/7589/files/93033038584.pdf
https://cdn.shopify.com/s/files/1/0268/8535/7743/files/android_iptv_apk_indir.pdf
https://cdn.shopify.com/s/files/1/0266/9376/3266/files/habits_of_mind_curriculum.pdf
https://ridolagu.weebly.com/uploads/1/3/0/7/130775195/gojagativite.pdf
https://mumixopid.weebly.com/uploads/1/3/1/8/131872042/vapalo.pdf
https://wepugimi.weebly.com/uploads/1/3/1/0/131070973/08477f7d.pdf
https://latenenagizogip.weebly.com/uploads/1/3/2/6/132696064/jajaluxuno_pelikigexexamo_padilu_kepiji.pdf
https://jizonuwuko.weebly.com/uploads/1/3/0/8/130814311/wedit_bajojabo.pdf
https://fijojonibiw.weebly.com/uploads/1/3/2/6/132681787/linurigaruxox.pdf
https://guwomenod.weebly.com/uploads/1/3/0/8/130873843/tugunari_fogeze_nezejavoz.pdf
https://jawasolasazilem.weebly.com/uploads/1/3/1/3/131379174/gevoderovepiru.pdf
https://zevigetadafuwun.weebly.com/uploads/1/3/0/9/130969942/jalam-ralenunu-ditejananireki-jetetexud.pdf
https://zimiduninu.weebly.com/uploads/1/3/1/6/131637103/9402018.pdf
https://juragubiv.weebly.com/uploads/1/3/0/8/130874328/94713876.pdf
https://gimejexoxixaza.weebly.com/uploads/1/3/1/8/131872185/kirorafagosox.pdf
http://www.w3.org/1999/02/22-rdf-syntax-ns#

Embedded domains

cctraff.ru
cdn.shopify.com
mojivimimujovo.weebly.com
jimigafekalese.weebly.com
ridolagu.weebly.com
mumixopid.weebly.com
wepugimi.weebly.com
latenenagizogip.weebly.com
jizonuwuko.weebly.com
fijojonibiw.weebly.com
guwomenod.weebly.com
jawasolasazilem.weebly.com
zevigetadafuwun.weebly.com
zimiduninu.weebly.com
juragubiv.weebly.com
gimejexoxixaza.weebly.com
www.w3.org
purl.org
ns.adobe.com

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report