MALICIOUS — petekabuge.pdf
MALICIOUS — petekabuge.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
2b6a0eda7b9b391eacccbcc84ad84e95f1125fdb7b887f3cec17be50a6dedbdf - SHA-1:
44777725c18c853423fae6fa36a85469c4e2bd8e - MD5:
472a842233cab0ba5448324529be0be3 - ssdeep:
768:ygGzpDhpFksty+3Ew2Ved9TNMFPvTr1ALyEWNQcsUWiF9XU9OEiwCGN:vGFtp3EVICTpVEWNQHUXE9OEiLGN - TLSH:
T1E4337BF35097ED4CBA8B6B079DE710599189878DA13287A054887B7DC4BCAFD7F00A21 - Submitted as: petekabuge.pdf
- File type: pdf · Size: 48444 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://guwomenod.weebly.com/uploads/1/3/0/8/130873843/pejajofedaxevaw_kozadesupuke.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://gettraff.ru/wb?keyword=naruto%20shippuden%20intro%2013, https://ruwopevod.weebly.com/uploads/1/3/1/3/131397973/7dbb9029426e52.pdf, https://guwomenod.weebly.com/uploads/1/3/0/8/130873843/pejajofedaxevaw_kozadesupuke.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/wb?keyword=naruto%20shippuden%20intro%2013
- https://ruwopevod.weebly.com/uploads/1/3/1/3/131397973/7dbb9029426e52.pdf
- https://guwomenod.weebly.com/uploads/1/3/0/8/130873843/pejajofedaxevaw_kozadesupuke.pdf
- https://pidofuvu.weebly.com/uploads/1/3/0/7/130739764/woxetukiwino_mupizazetanev_wofigagidip.pdf
- https://vupimolafi.weebly.com/uploads/1/3/1/3/131398504/147665.pdf
- https://fewevivib.weebly.com/uploads/1/3/0/8/130813821/sopaxoduwojorojobu.pdf
- https://site-1037865.mozfiles.com/files/1037865/libepanizaf.pdf
- https://site-1036665.mozfiles.com/files/1036665/2890309366.pdf
- https://site-1040092.mozfiles.com/files/1040092/32064255769.pdf
- https://site-1037164.mozfiles.com/files/1037164/mitujaxe.pdf
- https://site-1041779.mozfiles.com/files/1041779/26882958720.pdf
- https://site-1039259.mozfiles.com/files/1039259/rukiniraxapawoxi.pdf
- https://site-1043649.mozfiles.com/files/1043649/85726736562.pdf
- https://site-1038946.mozfiles.com/files/1038946/52123435523.pdf
- https://uploads.strikinglycdn.com/files/2d064323-f653-497f-91e2-624672538880/22621939029.pdf
- https://uploads.strikinglycdn.com/files/642a1601-2b3a-4402-a583-3bbab334fb4b/terovagorowupufatotiwod.pdf
- https://site-1040561.mozfiles.com/files/1040561/59657803347.pdf
- https://site-1044197.mozfiles.com/files/1044197/sidezibosidinulodepav.pdf
- https://site-1041498.mozfiles.com/files/1041498/noketenurukomemisu.pdf
- https://site-1042016.mozfiles.com/files/1042016/gurusoxavij.pdf
- https://site-1038365.mozfiles.com/files/1038365/tipusakumuferobitovaxisun.pdf
- https://site-1042282.mozfiles.com/files/1042282/zurokipilunemenab.pdf
- https://site-1042018.mozfiles.com/files/1042018/50092209496.pdf
- https://site-1039847.mozfiles.com/files/1039847/99578925951.pdf
- https://site-1040683.mozfiles.com/files/1040683/57109722442.pdf
Embedded domains
- gettraff.ru
- ruwopevod.weebly.com
- guwomenod.weebly.com
- pidofuvu.weebly.com
- vupimolafi.weebly.com
- fewevivib.weebly.com
- site-1037865.mozfiles.com
- site-1036665.mozfiles.com
- site-1040092.mozfiles.com
- site-1037164.mozfiles.com
- site-1041779.mozfiles.com
- site-1039259.mozfiles.com
- site-1043649.mozfiles.com
- site-1038946.mozfiles.com
- uploads.strikinglycdn.com
- site-1040561.mozfiles.com
- site-1044197.mozfiles.com
- site-1041498.mozfiles.com
- site-1042016.mozfiles.com
- site-1038365.mozfiles.com
- site-1042282.mozfiles.com
- site-1042018.mozfiles.com
- site-1039847.mozfiles.com
- site-1040683.mozfiles.com
- www.w3.org
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report