MALICIOUS — logepajesid.pdf
MALICIOUS — logepajesid.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
0ae6c7b58bad2c6036519b9ff713530e4da946bf942271ee2870407addd2349d - SHA-1:
e1c600022e12662a010fb2163d0a593f4f620a69 - MD5:
f9b8dde4c879b879bab1181b82308522 - ssdeep:
768:sgGzpD2p1Usrs9JmfRHQsZOEtmnZsKgOEaFkiOliwa1CXnA67t2JCMujtSW6R6lN:pGFCpiWEwa14A67sMrtSWMEnvHF - TLSH:
T13C338DF760D7DD8CBA86DF13A9AB256A608EC74C6122DA90448C773CC4BC66D6F50890 - Submitted as: logepajesid.pdf
- File type: pdf · Size: 50476 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://jizonuwuko.weebly.com/uploads/1/3/0/8/130814311/77af9e3ce.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/wb?keyword=advances%20in%20financial%20machine%20learning%20pdf%20github, https://jizonuwuko.weebly.com/uploads/1/3/0/8/130814311/77af9e3ce.pdf, https://redunexodozik.weebly.com/uploads/1/3/0/8/130814050/767975.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=advances%20in%20financial%20machine%20learning%20pdf%20github
- https://jizonuwuko.weebly.com/uploads/1/3/0/8/130814311/77af9e3ce.pdf
- https://redunexodozik.weebly.com/uploads/1/3/0/8/130814050/767975.pdf
- https://jarofudi.weebly.com/uploads/1/3/1/4/131408364/nalevunatakufobukexe.pdf
- https://gemaxudemaxepeb.weebly.com/uploads/1/3/1/0/131070646/kopuxivepu.pdf
- https://mulodunewumil.weebly.com/uploads/1/3/4/3/134314444/suduzikujanomivazes.pdf
- https://cdn-cms.f-static.net/uploads/4391624/normal_5f938f58b93d4.pdf
- https://cdn-cms.f-static.net/uploads/4408343/normal_5f95cff14e05a.pdf
- https://cdn-cms.f-static.net/uploads/4373304/normal_5f897ea6387fb.pdf
- https://cdn-cms.f-static.net/uploads/4366664/normal_5f87ad14716b0.pdf
- https://cdn-cms.f-static.net/uploads/4390995/normal_5f8fcaa1b7dd6.pdf
- https://cdn-cms.f-static.net/uploads/4383470/normal_5f934329ec61a.pdf
- https://cdn-cms.f-static.net/uploads/4421944/normal_5f969ed561d09.pdf
- https://cdn-cms.f-static.net/uploads/4369919/normal_5f8a4754e5376.pdf
- https://cdn-cms.f-static.net/uploads/4366057/normal_5f90eb1be444f.pdf
- https://cdn-cms.f-static.net/uploads/4402294/normal_5f95e4eac0292.pdf
- https://cdn-cms.f-static.net/uploads/4369496/normal_5f887cd1a525d.pdf
- https://cdn-cms.f-static.net/uploads/4383699/normal_5f924d616d7f0.pdf
- https://cdn.shopify.com/s/files/1/0438/6629/2389/files/nhmrc_guidelines_staying_healthy.pdf
- https://cdn.shopify.com/s/files/1/0468/8366/8125/files/xanonipugavezekiguxaga.pdf
- https://cdn.shopify.com/s/files/1/0483/9440/4008/files/mugotunepixuxuzipezunok.pdf
- https://cdn.shopify.com/s/files/1/0440/4445/1990/files/vediribon.pdf
- https://cdn-cms.f-static.net/uploads/4369307/normal_5f8ec05f53ebb.pdf
- https://cdn-cms.f-static.net/uploads/4369784/normal_5f918c1eeefab.pdf
- https://cdn-cms.f-static.net/uploads/4374519/normal_5f8a1a0b4c0b7.pdf
Embedded domains
- cctraff.ru
- jizonuwuko.weebly.com
- redunexodozik.weebly.com
- jarofudi.weebly.com
- gemaxudemaxepeb.weebly.com
- mulodunewumil.weebly.com
- cdn-cms.f-static.net
- cdn.shopify.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report