MALICIOUS — xumowobe.pdf
MALICIOUS — xumowobe.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
331913076dd862f104006bad09471d4f079b2760f649e71a13fd8bc34e04cebe - SHA-1:
284b17ce369314a8a4a81f239753924f21f35bf1 - MD5:
669e053e29b19343a72a850b200ad213 - ssdeep:
768:QgGzpDoevInvAXGf5hIbLOJDKlH+Mtwr6ANdq/bR12yzWp/v:9GFkesJiHOJOlH+Fr6ANdYbHn8/v - TLSH:
T1D5326BF750A7EC9C7ACBEB0369BB251D518E9788703296A444C8272CC5BC2BD7E10A51 - Submitted as: xumowobe.pdf
- File type: pdf · Size: 46419 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://jatorogerujew.weebly.com/uploads/1/3/2/7/132710569/gowijipomunolu_lirogub_loletakimup_rozugofekowe.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/wb?keyword=nonverbal%20behavior%20in%20interpersonal%20relations%20pdf, https://pumowurunumig.weebly.com/uploads/1/3/2/7/132740285/ralas-tapupav.pdf, https://bedizegoresupa.weebly.com/uploads/1/3/1/3/131379398/vunidixeviro_xitosujitupile_kadape.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=nonverbal%20behavior%20in%20interpersonal%20relations%20pdf
- https://pumowurunumig.weebly.com/uploads/1/3/2/7/132740285/ralas-tapupav.pdf
- https://bedizegoresupa.weebly.com/uploads/1/3/1/3/131379398/vunidixeviro_xitosujitupile_kadape.pdf
- https://jatorogerujew.weebly.com/uploads/1/3/2/7/132710569/gowijipomunolu_lirogub_loletakimup_rozugofekowe.pdf
- https://guwomenod.weebly.com/uploads/1/3/0/8/130873843/297c0.pdf
- https://uploads.strikinglycdn.com/files/acfdf179-6fa5-469c-a8e0-22a965afbb4c/xenepafezuvobi.pdf
- https://uploads.strikinglycdn.com/files/f22f557c-bbfd-4a33-947c-112956d6caf5/jaxemivogofozixe.pdf
- https://uploads.strikinglycdn.com/files/7f549c29-64c1-46ce-9627-33f7c114ecb6/walixajix.pdf
- https://uploads.strikinglycdn.com/files/489a008d-87ad-4fac-921d-9e13003932b7/juwamebasefakojuwexa.pdf
- https://uploads.strikinglycdn.com/files/9c6d31f4-6616-44a5-bf38-5b9b28a0bad7/7548334374.pdf
- https://uploads.strikinglycdn.com/files/71b85cd3-a61d-4be3-822b-c7491c62a5db/jetagefuvosule.pdf
- https://uploads.strikinglycdn.com/files/65053b68-b2c0-49dc-894b-e82235874247/14239878608.pdf
- https://uploads.strikinglycdn.com/files/b2e369a2-4306-4f79-8c0f-034a27a2d066/52319612409.pdf
- https://uploads.strikinglycdn.com/files/8c694f35-1eae-4f6d-afe1-dfe2d31e143c/monavugezitejesapomovit.pdf
- https://uploads.strikinglycdn.com/files/366d8df7-9d62-4c3b-b247-06c1fcebbb09/vojosevot.pdf
- https://uploads.strikinglycdn.com/files/beda4d18-60d0-4099-b111-aedd2d415d10/96478356710.pdf
- https://site-1039869.mozfiles.com/files/1039869/peximefimevevik.pdf
- https://site-1039405.mozfiles.com/files/1039405/51742374981.pdf
- https://uploads.strikinglycdn.com/files/16d4f3c1-45cd-45c4-9aa9-ae2d49b7597f/pifodolojetuxuwesozuv.pdf
- https://uploads.strikinglycdn.com/files/43a4e106-0a87-4a27-9db7-f1f8e40d3d9a/rufazariv.pdf
- https://uploads.strikinglycdn.com/files/c3ec3955-06ea-4238-877d-1ff94e80b6bd/48494838876.pdf
- https://uploads.strikinglycdn.com/files/e7c4d21f-37f3-4ef1-8438-7e65421bb214/timelimakix.pdf
- https://uploads.strikinglycdn.com/files/b0a4f74f-98e8-4492-ae04-10ec0f489a6f/kaxegesuterurutopaxiraz.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
Embedded domains
- cctraff.ru
- pumowurunumig.weebly.com
- bedizegoresupa.weebly.com
- jatorogerujew.weebly.com
- guwomenod.weebly.com
- uploads.strikinglycdn.com
- site-1039869.mozfiles.com
- site-1039405.mozfiles.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report