SUSPICIOUS — earth_and_environmental_science_final_review_packet_answer_key.pdf
SUSPICIOUS — earth_and_environmental_science_final_review_packet_answer_key.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 3 of 53 detection engines flagged it.
Identification
- SHA-256:
12605c8cc75eb7553b67f9644d8b0f1171a66414a809c6356da6e949317b2e31 - SHA-1:
88d4e58cb666f2fcdea925436f7e48c45dc9058f - MD5:
4615d1fad2f7d4c8529d0d4736ae1d23 - ssdeep:
768:zgGzpD5eH5gOpIrseCo4pmMOKOsesrWWllQvdw5RHsNEBymg8cfMwDZEXlPW+vY4:MGFleKQ9iWTgAxymg8ofDZClP5QYz - TLSH:
T165316BF300ABEC8C7A8B9B53ADBB116A658AD38C6236D750558CA73CD47C27D7E10850 - Submitted as: earth_and_environmental_science_final_review_packet_answer_key.pdf
- File type: pdf · Size: 42809 bytes
- Verdict: suspicious (44/100)
Detections (3 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: https://cctraff.ru/strik?keyword=earth+and+environmental+science+final+review+packet+answer+key, https://cdn-cms.f-static.net/uploads/4368503/normal_5f87d69123ad1.pdf, https://cdn-cms.f-static.net/uploads/4371543/normal_5f89328dc80fc.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis (windows)
0 behavior events · 0 ATT&CK techniques · 0 dropped files.
Runtime network
- none
Embedded URLs
- https://cctraff.ru/strik?keyword=earth+and+environmental+science+final+review+packet+answer+key
- https://cdn-cms.f-static.net/uploads/4368503/normal_5f87d69123ad1.pdf
- https://cdn-cms.f-static.net/uploads/4371543/normal_5f89328dc80fc.pdf
- https://cdn-cms.f-static.net/uploads/4374522/normal_5f89b39aef314.pdf
- https://cdn-cms.f-static.net/uploads/4366032/normal_5f870bb17a8c5.pdf
- https://cdn-cms.f-static.net/uploads/4391602/normal_5f90f6305129a.pdf
- https://cdn.shopify.com/s/files/1/0266/8573/5105/files/redstone_lamp_recipe_1.15.pdf
- https://cdn.shopify.com/s/files/1/0500/4895/8614/files/piano_music_symbols.pdf
- https://cdn.shopify.com/s/files/1/0501/8327/4657/files/37812275476.pdf
- https://cdn.shopify.com/s/files/1/0483/3709/2771/files/kingdom_hearts_trophy_list_ps4.pdf
- https://cdn.shopify.com/s/files/1/0483/2319/9140/files/geometric_probability_worksheet_answers.pdf
- https://s3.amazonaws.com/felasorarabipis/mappa_mezzi_pubblici_amsterdam.pdf
- https://s3.amazonaws.com/ropuba/dc_metro_train_map.pdf
- https://s3.amazonaws.com/fasanag/29716651071.pdf
- https://s3.amazonaws.com/dinigugaxej/57021953345.pdf
- https://cdn.shopify.com/s/files/1/0432/4540/4327/files/swampscott_middle_school_supply_list.pdf
- https://cdn.shopify.com/s/files/1/0433/0101/1611/files/what_is_an_app_icon_badge_samsung.pdf
- https://cdn.shopify.com/s/files/1/0432/6627/7534/files/94895637719.pdf
- https://cdn.shopify.com/s/files/1/0433/4642/8062/files/fiber_optic_cable_splicing_training.pdf
- https://cdn.shopify.com/s/files/1/0486/4219/5624/files/showbox_download_movies_app_android_free_shows.pdf
- https://mabanopovofed.weebly.com/uploads/1/3/1/4/131453130/guwijamovi.pdf
- https://wekubuzebebam.weebly.com/uploads/1/3/0/7/130739705/jexojepatelob_poxogatufelu.pdf
- https://rikisuluwujufa.weebly.com/uploads/1/3/1/4/131452938/df6b3c03550a04.pdf
- https://runebipunozup.weebly.com/uploads/1/3/1/4/131406604/fiwemufujif.pdf
- https://zevigetadafuwun.weebly.com/uploads/1/3/0/9/130969942/fd28989654d.pdf
Embedded domains
- cctraff.ru
- cdn-cms.f-static.net
- cdn.shopify.com
- s3.amazonaws.com
- mabanopovofed.weebly.com
- wekubuzebebam.weebly.com
- rikisuluwujufa.weebly.com
- runebipunozup.weebly.com
- zevigetadafuwun.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report