MALICIOUS — cuisinart_coffee_maker_directions.pdf
MALICIOUS — cuisinart_coffee_maker_directions.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 3 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
2863e2b2b0012ba704a72acf06c6cfff656a7a7aae2e8b2e88891fd96984d091 - SHA-1:
bd4d0afc8fef8579d52e997f918156af132082da - MD5:
6da8a239e49bf4dfdc2b01e911a07154 - ssdeep:
768:wgGzpDMqyruDyARA3kLlvR6wFVKbqrt6XqHOaq46AH/edclsY:dGFQq5NAULl56JatPOaq4MclsY - TLSH:
T17334BFF3A4E3ED4C79C66B63ADAB2569118E878C51279750198CAB3DC4BC3BE7D01810 - Submitted as: cuisinart_coffee_maker_directions.pdf
- File type: pdf · Size: 53604 bytes
- Verdict: malicious (75/100)
Detections (3 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://popilezofale.weebly.com/uploads/1/3/1/1/131164236/c2e393a1be8bdd.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/strik?keyword=cuisinart+coffee+maker+directions, https://uploads.strikinglycdn.com/files/c65b2457-b532-468e-a06a-ddefb39370cc/23964166380.pdf, https://uploads.strikinglycdn.com/files/6b44ff68-3325-45eb-97a2-c64da05e1f81/negideboxelelezupalel.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/strik?keyword=cuisinart+coffee+maker+directions
- https://uploads.strikinglycdn.com/files/c65b2457-b532-468e-a06a-ddefb39370cc/23964166380.pdf
- https://uploads.strikinglycdn.com/files/6b44ff68-3325-45eb-97a2-c64da05e1f81/negideboxelelezupalel.pdf
- https://uploads.strikinglycdn.com/files/4e16f15d-27c2-450d-b7fc-eedc0a3d06cd/xijitefugofitizodesolez.pdf
- https://uploads.strikinglycdn.com/files/4f808e5a-3d70-4326-96f9-47eb1816a8da/ichigo_chocolat_flavor_episode_1.pdf
- https://uploads.strikinglycdn.com/files/15ff9f7f-1537-4fed-82e3-5f9bb1ba110f/spirax_sarco_handbook.pdf
- https://popilezofale.weebly.com/uploads/1/3/1/1/131164236/c2e393a1be8bdd.pdf
- https://patelevenimo.weebly.com/uploads/1/3/1/4/131437444/gijevab.pdf
- https://pigogokeda.weebly.com/uploads/1/3/1/8/131857695/1668146.pdf
- https://tivakoxidedopa.weebly.com/uploads/1/3/0/7/130776298/5619890.pdf
- https://mivosubewo.weebly.com/uploads/1/3/1/4/131407796/9f1e467e1e7.pdf
- https://bubixoduxufito.weebly.com/uploads/1/3/1/0/131070588/2484142.pdf
- https://tenabawik.weebly.com/uploads/1/3/2/7/132710661/7154912.pdf
- https://punotajevi.weebly.com/uploads/1/3/4/2/134266109/xisuweji-ruxasigidinojaj-gudenufeb.pdf
- https://siregudak.weebly.com/uploads/1/3/0/7/130738759/785c26ac87cc3.pdf
- https://nizesuvijeva.weebly.com/uploads/1/3/1/6/131607023/5999a2.pdf
- https://xonuvalax.weebly.com/uploads/1/3/1/4/131437330/91eab44141c3e.pdf
- https://mogilifus.weebly.com/uploads/1/3/0/7/130739831/1d1f8ecc085ca.pdf
- https://purolejomi.weebly.com/uploads/1/3/0/7/130776639/xoramusawug_kafegosuruwo_fopedunowito.pdf
- https://uploads.strikinglycdn.com/files/260db27a-ddab-4ff2-96e9-e00f29bdefec/dunkin_donuts_caramel_coffee_calories.pdf
- https://uploads.strikinglycdn.com/files/eb7a2a05-ea97-4c60-8a1d-455e6cb5cb40/pitomowojaturevopake.pdf
- https://uploads.strikinglycdn.com/files/d961765c-40c7-4f0f-a9c5-f2d6cd273a2f/85721409595.pdf
- https://uploads.strikinglycdn.com/files/989ba276-3b72-4321-b831-c4f41ee98d68/tuzopas.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
Embedded domains
- cctraff.ru
- uploads.strikinglycdn.com
- popilezofale.weebly.com
- patelevenimo.weebly.com
- pigogokeda.weebly.com
- tivakoxidedopa.weebly.com
- mivosubewo.weebly.com
- bubixoduxufito.weebly.com
- tenabawik.weebly.com
- punotajevi.weebly.com
- siregudak.weebly.com
- nizesuvijeva.weebly.com
- xonuvalax.weebly.com
- mogilifus.weebly.com
- purolejomi.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report