SUSPICIOUS — cac0688d201334.pdf
SUSPICIOUS — cac0688d201334.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (58/100). 3 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
1f9dc4ea4c0ee62c255772abecc7aa603c89f45868610929d184903645b50a6d - SHA-1:
df83611f7077d343378216070b34fb5ca98fee74 - MD5:
5ee5235f3b099f38d11392d65c43117a - ssdeep:
1536:AGFupdsIZ4HzY+MHAUvtugATndukibIY:NFupMhyBtugAj0kxY - TLSH:
T17934CFF34093ED8C798A5B03B9EB21946288D348317AE390598CB63CC5FC6BD6E10D61 - Submitted as: cac0688d201334.pdf
- File type: pdf · Size: 54388 bytes
- Verdict: suspicious (58/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: flagged
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The suspicious score of 58/100 is the fusion of 4 weighted signals:
- Embedded link rated suspicious by URL analysis: https://uploads.strikinglycdn.com/files/c3ec3955-06ea-4238-877d-1ff94e80b6bd/48494838876.pdf - network signal, weight 0.40, confidence 0.60
- Embedded network infrastructure: https://cctraff.ru/wb?keyword=inside%20reporting%20chapter%207, https://uploads.strikinglycdn.com/files/d631e242-e2a4-491d-bfbe-f013a3e2c9d1/28868395135.pdf, https://uploads.strikinglycdn.com/files/7246f770-2c72-4a53-99a4-3bd2894f753c/fexepabezinaliz.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=inside%20reporting%20chapter%207
- https://uploads.strikinglycdn.com/files/d631e242-e2a4-491d-bfbe-f013a3e2c9d1/28868395135.pdf
- https://uploads.strikinglycdn.com/files/7246f770-2c72-4a53-99a4-3bd2894f753c/fexepabezinaliz.pdf
- https://uploads.strikinglycdn.com/files/a5895193-86c7-4759-b21b-26fc39f779f0/mebejagaderaliwatexumotov.pdf
- https://uploads.strikinglycdn.com/files/04b34eb9-5995-4728-84e2-6b85f822f6d0/15048456372.pdf
- https://uploads.strikinglycdn.com/files/c3ec3955-06ea-4238-877d-1ff94e80b6bd/48494838876.pdf
- https://cdn-cms.f-static.net/uploads/4365586/normal_5f86f5251941f.pdf
- https://cdn-cms.f-static.net/uploads/4365627/normal_5f8713df33178.pdf
- https://cdn-cms.f-static.net/uploads/4365659/normal_5f879d249965d.pdf
- https://cdn-cms.f-static.net/uploads/4366348/normal_5f879b2f82df3.pdf
- https://cdn-cms.f-static.net/uploads/4365584/normal_5f874d4572ecd.pdf
- https://cdn.shopify.com/s/files/1/0479/1907/1399/files/bavuk.pdf
- https://cdn.shopify.com/s/files/1/0491/8811/0502/files/the_croods_2_official_trailer_2020.pdf
- https://site-1039933.mozfiles.com/files/1039933/lalemejaxanumawek.pdf
- https://site-1036945.mozfiles.com/files/1036945/11592675814.pdf
- https://site-1041188.mozfiles.com/files/1041188/85566171971.pdf
- https://site-1038679.mozfiles.com/files/1038679/68263424081.pdf
- https://uploads.strikinglycdn.com/files/a145a871-2cef-4f61-b877-55a6ffa1301d/lirusafuganafusubonur.pdf
- https://uploads.strikinglycdn.com/files/ba2e12b2-53f0-4128-a93e-83cd88b86209/94551241631.pdf
- https://cdn.shopify.com/s/files/1/0428/6516/4454/files/insert_name_here_waver.pdf
- https://cdn.shopify.com/s/files/1/0481/4055/0311/files/multiplying_binomials_times_trinomials_worksheet.pdf
- https://cdn.shopify.com/s/files/1/0430/3139/6501/files/fisica_dinamica_ejercicios_resueltos.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/pdf/1.3/
Embedded domains
- cctraff.ru
- uploads.strikinglycdn.com
- cdn-cms.f-static.net
- cdn.shopify.com
- site-1039933.mozfiles.com
- site-1036945.mozfiles.com
- site-1041188.mozfiles.com
- site-1038679.mozfiles.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report