MALICIOUS — seluxazivaf.pdf
MALICIOUS — seluxazivaf.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
14cee3372216f172931fe22682c51677b157b52bace4a8bae4b6352e19424b33 - SHA-1:
b62ff6d16c95cc2909bfb2e5b00a1d8dcd050a1b - MD5:
1273f2c29f7bfd6c2a9e1379c2d311e5 - ssdeep:
768:egGzpDvpC14P+GTWhYgWbtLXd7rkHyi8PGVcuI8lDSOfSAKm:bGFDpXGGTWhYFbtLFkyi8PGVcu+HAKm - TLSH:
T10B327DF310A7ED8C7B8B9B03ADFB14695189D38D6137D7500598672DC8BC2BD2E10A61 - Submitted as: seluxazivaf.pdf
- File type: pdf · Size: 45316 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://mogilifus.weebly.com/uploads/1/3/0/7/130739831/jibepare-vudaramuzi-refirezagulele.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/wb?keyword=bppv%20pdf%20patient, https://judemozosuduj.weebly.com/uploads/1/3/4/3/134306717/7227236.pdf, https://besiwalufeg.weebly.com/uploads/1/3/2/6/132696214/nodimakovej_xosukukaleropo.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=bppv%20pdf%20patient
- https://judemozosuduj.weebly.com/uploads/1/3/4/3/134306717/7227236.pdf
- https://besiwalufeg.weebly.com/uploads/1/3/2/6/132696214/nodimakovej_xosukukaleropo.pdf
- https://ditiwudo.weebly.com/uploads/1/3/1/4/131452947/d0e65a65a5.pdf
- https://mogilifus.weebly.com/uploads/1/3/0/7/130739831/jibepare-vudaramuzi-refirezagulele.pdf
- https://s3.amazonaws.com/jazuravazaguz/ejemplos_de_enlaces_peptidicos_de_aminoacidos.pdf
- https://s3.amazonaws.com/zetare/lomigotadi.pdf
- https://s3.amazonaws.com/fasanag/ramasalad.pdf
- https://s3.amazonaws.com/golepe/57216095588.pdf
- https://s3.amazonaws.com/donake/36624686875.pdf
- https://s3.amazonaws.com/fefurorobumi/ophthalmic_lens_design.pdf
- https://s3.amazonaws.com/zetare/educacion_y_neoliberalismo_en_mexico_jaime_ornelas.pdf
- https://s3.amazonaws.com/tetazino/pijudewopogujonepetiro.pdf
- https://s3.amazonaws.com/xanebavifamopez/61219985108.pdf
- https://s3.amazonaws.com/salosibejodod/the_hobbit.pdf
- https://s3.amazonaws.com/jamokaroxoj/aditya_hrudayam_stotram_in_kannada.pdf
- https://viziwebaf.weebly.com/uploads/1/3/3/9/133999863/1488a.pdf
- https://bonujuvab.weebly.com/uploads/1/3/2/7/132740321/lanovawipixuditi.pdf
- https://dutitujazekap.weebly.com/uploads/1/3/0/8/130814390/xoxulobej-kikizidusa.pdf
- https://nutolifawivu.weebly.com/uploads/1/3/1/4/131437776/dubetejejebikaz.pdf
- https://uploads.strikinglycdn.com/files/ff6984d4-dec2-4189-b9ee-98d42c4b4f87/zalogenimisijeximutafeluk.pdf
- https://uploads.strikinglycdn.com/files/837fcd20-92a1-4eea-906a-ba18835ea519/kebofedeba.pdf
- https://uploads.strikinglycdn.com/files/96d4fc4f-9afa-4c9a-9784-ca45b516b6d4/84225355656.pdf
- https://uploads.strikinglycdn.com/files/ac6e00ed-3ab0-44dc-b500-2ebc8b864163/84743898905.pdf
- https://uploads.strikinglycdn.com/files/05904ddc-4458-4d6a-89f1-2cca83e19095/vokonuwijawuw.pdf
Embedded domains
- cctraff.ru
- judemozosuduj.weebly.com
- besiwalufeg.weebly.com
- ditiwudo.weebly.com
- mogilifus.weebly.com
- s3.amazonaws.com
- viziwebaf.weebly.com
- bonujuvab.weebly.com
- dutitujazekap.weebly.com
- nutolifawivu.weebly.com
- uploads.strikinglycdn.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report