SUSPICIOUS — 7358928.pdf
SUSPICIOUS — 7358928.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 3 of 50 detection engines flagged it.
Identification
- SHA-256:
3af8a6f5cbbf1581232e547b3ed2d1216828364239b5d0db5f17fb04bae22ac8 - SHA-1:
6de9722c06987483582fcbc7014cd5f0150e1b98 - MD5:
7195c9378723ad97684e5e2205daeff9 - ssdeep:
768:+gGzpDRMeOdL/6omK+l/J7C7bmyx3MJl+A7IrHLId6FbOj4eylCjQ0Ql+:7GFueXJHlRvyhMJl+kIr8Dj4XCo+ - TLSH:
T15A337DF710A7ED8C7ACF6F439EE7119D514A878D712396905098B62CC8BC6BC6F00A61 - Submitted as: 7358928.pdf
- File type: pdf · Size: 48610 bytes
- Verdict: suspicious (44/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Kaspersky (KVRT): UDS:Trojan.PDF.SBadur.gen
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: https://cctraff.ru/wb?keyword=o%20capital%20livro%203%20boitempo%20pdf, https://uploads.strikinglycdn.com/files/5667aad6-d04d-4e0b-8280-6d17857f8dc0/tenegizodonabapapiw.pdf, https://uploads.strikinglycdn.com/files/cc6ee645-06d8-4897-9eed-4a63846038de/41757508544.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=o%20capital%20livro%203%20boitempo%20pdf
- https://uploads.strikinglycdn.com/files/5667aad6-d04d-4e0b-8280-6d17857f8dc0/tenegizodonabapapiw.pdf
- https://uploads.strikinglycdn.com/files/cc6ee645-06d8-4897-9eed-4a63846038de/41757508544.pdf
- https://uploads.strikinglycdn.com/files/102d6407-eff8-4290-96d5-dd074feef156/67812991499.pdf
- https://site-1038682.mozfiles.com/files/1038682/roxisevebifinubuw.pdf
- https://site-1045404.mozfiles.com/files/1045404/android_snackbar_show_time.pdf
- https://uploads.strikinglycdn.com/files/2bc7c802-71c9-4592-bc1b-30a8298f77e4/47286946026.pdf
- https://uploads.strikinglycdn.com/files/c2027cc8-f768-4c38-9692-aca8157d90da/86127261848.pdf
- https://uploads.strikinglycdn.com/files/7e122957-93dc-4b0a-9c0b-db7f1802135b/vokuz.pdf
- https://uploads.strikinglycdn.com/files/53b848de-629d-4f18-9959-418f2ca12a1e/64829517142.pdf
- https://uploads.strikinglycdn.com/files/f2eacd75-77b6-49bb-847c-4959503787fd/49030366375.pdf
- https://uploads.strikinglycdn.com/files/3b881dbe-e0c3-4ca7-9ee1-e2b4eafff356/wovaxiduwitinaxufa.pdf
- https://uploads.strikinglycdn.com/files/01343831-342e-4699-a168-7ff70c8338e1/buzafujat.pdf
- https://uploads.strikinglycdn.com/files/2ecfc5a6-0560-4e78-a31f-0036dd459cae/84234647853.pdf
- https://uploads.strikinglycdn.com/files/446a63fd-7931-420c-81ca-ec0b588fb392/wemuwodamibipuzi.pdf
- https://uploads.strikinglycdn.com/files/738a3b53-4e6d-4cf5-b36f-e112e09c8113/veveke.pdf
- https://vuxozajuje.weebly.com/uploads/1/3/1/3/131379873/vunud.pdf
- https://rewemekekebaz.weebly.com/uploads/1/3/1/4/131406535/474185.pdf
- https://jatorogerujew.weebly.com/uploads/1/3/2/7/132710569/bawap.pdf
- https://jakedekokobara.weebly.com/uploads/1/3/1/3/131381480/10610.pdf
- https://bajusumuke.weebly.com/uploads/1/3/2/7/132741128/rejojokipibofiz.pdf
- https://site-1043034.mozfiles.com/files/1043034/34645132038.pdf
- https://site-1039618.mozfiles.com/files/1039618/75054324927.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
Embedded domains
- cctraff.ru
- uploads.strikinglycdn.com
- site-1038682.mozfiles.com
- site-1045404.mozfiles.com
- vuxozajuje.weebly.com
- rewemekekebaz.weebly.com
- jatorogerujew.weebly.com
- jakedekokobara.weebly.com
- bajusumuke.weebly.com
- site-1043034.mozfiles.com
- site-1039618.mozfiles.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report