SUSPICIOUS — 51773542107.pdf
SUSPICIOUS — 51773542107.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 3 of 53 detection engines flagged it.
Identification
- SHA-256:
20b824aabf4747e442b21010721571725e04c13bd8602dc103d8f346bc5ffab4 - SHA-1:
d5333976beda4a610b117694fc45bad97830d6c6 - MD5:
893e1e179ff9ac53bcadd67be30349b8 - ssdeep:
768:hgGzpDzjqgoXR5RaAj0vq1DX5q9C1dPW94RDwHnWF7mb5PkkGNSjlbJ1cdA:SGFfjnu5RR1DpIC1d+94RDQbpGq7cdA - TLSH:
T1EE337EF350A7ED4C7B8FAB03AEA7115A948AD38D603697500198672CD87C5BE7F01A50 - Submitted as: 51773542107.pdf
- File type: pdf · Size: 49237 bytes
- Verdict: suspicious (44/100)
Detections (3 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: https://ggtraff.ru/strik?keyword=tai+lopez+house, https://uploads.strikinglycdn.com/files/85279bb4-eabc-4dc7-b995-ba07becde800/vofasok.pdf, https://uploads.strikinglycdn.com/files/30ba3683-5a0f-4f1c-9fdd-5d902b37f5ef/28384100548.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://ggtraff.ru/strik?keyword=tai+lopez+house
- https://uploads.strikinglycdn.com/files/85279bb4-eabc-4dc7-b995-ba07becde800/vofasok.pdf
- https://uploads.strikinglycdn.com/files/30ba3683-5a0f-4f1c-9fdd-5d902b37f5ef/28384100548.pdf
- https://uploads.strikinglycdn.com/files/c3bb69b3-d1ed-4831-afac-d90f91722998/8302345114.pdf
- https://uploads.strikinglycdn.com/files/1898c4b9-8238-467f-a90c-053c5c57d9a7/vibexotonewokibuk.pdf
- https://uploads.strikinglycdn.com/files/7262c2b2-7fe0-4cf4-9b4c-e28200200b89/79097300130.pdf
- https://vunisanelebori.weebly.com/uploads/1/3/3/9/133999195/5d1497883.pdf
- https://warakamaluxib.weebly.com/uploads/1/3/4/3/134378328/juriru.pdf
- https://wonigebegi.weebly.com/uploads/1/3/1/6/131606731/gurikosugok.pdf
- https://xojisige.weebly.com/uploads/1/3/1/6/131637148/jisonure.pdf
- https://s3.amazonaws.com/jolituzoji/emotional_intelligence_self_assessment_questionnaire.pdf
- https://s3.amazonaws.com/xanebavifamopez/suwupezodititifunurorafe.pdf
- https://s3.amazonaws.com/subud/application_software_of_computer.pdf
- https://s3.amazonaws.com/tetazino/anemometer_working_principle.pdf
- https://cdn.shopify.com/s/files/1/0436/5506/9849/files/48478760065.pdf
- https://cdn.shopify.com/s/files/1/0431/3192/8730/files/kolusij.pdf
- https://cdn.shopify.com/s/files/1/0478/8233/8470/files/clarion_mcd360_manual.pdf
- https://cdn.shopify.com/s/files/1/0502/1673/0799/files/job_motivation_journal.pdf
- https://xigokerurubupa.weebly.com/uploads/1/3/4/3/134312623/7908187.pdf
- https://moguvikob.weebly.com/uploads/1/3/0/8/130874292/6788170.pdf
- https://winomumamo.weebly.com/uploads/1/3/1/0/131070375/pimipupitof_rotomu_zewunitepenupox_kegesirupazipam.pdf
- https://riragojefo.weebly.com/uploads/1/3/1/8/131857115/xipiwe_tivalu_nutojaj.pdf
- https://uploads.strikinglycdn.com/files/28ba4d6f-c958-45b2-9ca6-756499e7178d/28329408195.pdf
- https://uploads.strikinglycdn.com/files/5259d07e-f0ee-426f-873e-8d80b8125337/50281492957.pdf
- https://uploads.strikinglycdn.com/files/994337cc-6186-4df3-827a-9c9042c6d10c/fijasigedorozegakadog.pdf
Embedded domains
- ggtraff.ru
- uploads.strikinglycdn.com
- vunisanelebori.weebly.com
- warakamaluxib.weebly.com
- wonigebegi.weebly.com
- xojisige.weebly.com
- s3.amazonaws.com
- cdn.shopify.com
- xigokerurubupa.weebly.com
- moguvikob.weebly.com
- winomumamo.weebly.com
- riragojefo.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report