MALICIOUS — 5b7ee53863a57f.pdf
MALICIOUS — 5b7ee53863a57f.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
37d42cc11d515a5e2835dc4ab2a22bc4755f0b91f955ad9ee08f7da32a5950cd - SHA-1:
2cad2088db19636df904a5e5637e350bce59416e - MD5:
54fcd16aae529a937b0b1371114a6a79 - ssdeep:
768:LgGzpDRY7IfqYmWbX+rvFU0SmpRMbg2ia1VWxPE3:0GFdYWToFU0Sd82B1VWxPE3 - TLSH:
T16B318EF750A3EE8C7E8A9B435DA7146A608ED3C97132A76048DC7B2CC1BC66D3E00565 - Submitted as: 5b7ee53863a57f.pdf
- File type: pdf · Size: 40514 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://texitanoz.weebly.com/uploads/1/3/0/7/130739996/63123db.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/wb?keyword=manual%20de%20usuario%20honeywell%20vista%2048, https://cdn.shopify.com/s/files/1/0497/9222/1346/files/my_abc_book.pdf, https://uploads.strikinglycdn.com/files/b5ad8d83-922e-488d-8f52-7ed3d0b14382/sunokuxofarinopubi.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=manual%20de%20usuario%20honeywell%20vista%2048
- https://cdn.shopify.com/s/files/1/0497/9222/1346/files/my_abc_book.pdf
- https://uploads.strikinglycdn.com/files/b5ad8d83-922e-488d-8f52-7ed3d0b14382/sunokuxofarinopubi.pdf
- https://uploads.strikinglycdn.com/files/011c5d98-47d3-46ab-92de-9beb73c95274/wukakojozo.pdf
- https://s3.amazonaws.com/gopuze/16426726962.pdf
- https://uploads.strikinglycdn.com/files/c58790d0-fc5a-48a4-bf53-52a9ca6cab7f/mafelesevivogeroluxu.pdf
- https://s3.amazonaws.com/jadudusujuje/subject_verb_agreement_paragraph_exercises_with_answers.pdf
- https://s3.amazonaws.com/tizowodifi/vabuximexotatuxutobexen.pdf
- https://uploads.strikinglycdn.com/files/4cb08ac1-ec40-4a0a-aa36-5821fb0a1be4/65661180597.pdf
- https://cdn.shopify.com/s/files/1/0496/2012/3801/files/oak_trees_gateshead.pdf
- https://s3.amazonaws.com/guvovigo/anxiety_and_depression_disorder.pdf
- https://texitanoz.weebly.com/uploads/1/3/0/7/130739996/63123db.pdf
- https://s3.amazonaws.com/fodose/xiluvivijiweperig.pdf
- https://s3.amazonaws.com/gumagabu/australian_scale_for_asperger_s_syndrome.pdf
- https://uploads.strikinglycdn.com/files/03251675-dd10-4dba-8d44-789c0aa811fd/gmat_official_guide_2019.pdf
- https://cdn.shopify.com/s/files/1/0482/6726/4164/files/58791997688.pdf
- https://bedizegoresupa.weebly.com/uploads/1/3/1/3/131379398/zanazanekoxel.pdf
- https://s3.amazonaws.com/baxegezivumi/55866275646.pdf
- https://laguvibokabab.weebly.com/uploads/1/3/4/3/134383318/damepefaxedi_vazisisapuxo.pdf
- https://s3.amazonaws.com/vikukinumet/rijigenarinuxitenawodefi.pdf
- https://juleladenoduko.weebly.com/uploads/1/3/4/4/134478401/gidopufi_teduzoriteled.pdf
- https://bilewobadazape.weebly.com/uploads/1/3/2/6/132695578/zezejiz_pofuwuxutix_xogenosi.pdf
- https://s3.amazonaws.com/zobuwubedak/banking_awareness_power_capsule.pdf
- https://cdn.shopify.com/s/files/1/0500/5236/6496/files/53815509690.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
Embedded domains
- cctraff.ru
- cdn.shopify.com
- uploads.strikinglycdn.com
- s3.amazonaws.com
- texitanoz.weebly.com
- bedizegoresupa.weebly.com
- laguvibokabab.weebly.com
- juleladenoduko.weebly.com
- bilewobadazape.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report