MALICIOUS — ssq_500_sonobuoy_reference_manual.pdf
MALICIOUS — ssq_500_sonobuoy_reference_manual.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 3 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
47264fb36ac44f2dc1451198217fa34fcc02ebca09a1510a43a448e7c4ad47a1 - SHA-1:
1304753f8c0f5a6c4c9d1ac9cb88ea3745411a0f - MD5:
a536668d14c11c200c181565e6af3202 - ssdeep:
1536:1GFCeFf5BvjBCCK2PVtd3/c6NvSRo1clHjbvVuXXMLWfq+EGasR7z:IFCet5Bvsqjd3/clWS9foXMwq+1Jx - TLSH:
T1BB38BEF381A7DC8C738AAF17B9E71099544BEB882131869044CDB77CD9BC9BC6E01A50 - Submitted as: ssq_500_sonobuoy_reference_manual.pdf
- File type: pdf · Size: 76655 bytes
- Verdict: malicious (75/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: flagged
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://rimesozarabef.weebly.com/uploads/1/3/1/6/131607712/9a5526b.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/strik?keyword=ssq+500+sonobuoy+reference+manual, https://cdn.shopify.com/s/files/1/0504/6229/4176/files/jogalobeseborubopove.pdf, https://cdn.shopify.com/s/files/1/0496/3110/1092/files/76325214297.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/strik?keyword=ssq+500+sonobuoy+reference+manual
- https://cdn.shopify.com/s/files/1/0504/6229/4176/files/jogalobeseborubopove.pdf
- https://cdn.shopify.com/s/files/1/0496/3110/1092/files/76325214297.pdf
- https://cdn.shopify.com/s/files/1/0428/5664/4774/files/33036828282.pdf
- https://cdn.shopify.com/s/files/1/0480/7481/7693/files/holt_mcdougal_literature_grade_10_textbook.pdf
- https://cdn.shopify.com/s/files/1/0496/7766/4413/files/brea_olinda_school_district.pdf
- https://cdn.shopify.com/s/files/1/0429/8512/8099/files/sigma_509_manual_dansk.pdf
- https://cdn.shopify.com/s/files/1/0430/6301/7629/files/17139235923.pdf
- https://nagifinapu.weebly.com/uploads/1/3/2/6/132696111/7115017.pdf
- https://rimesozarabef.weebly.com/uploads/1/3/1/6/131607712/9a5526b.pdf
- https://vopevejefed.weebly.com/uploads/1/3/1/6/131606133/6941374.pdf
- https://reredutubonuki.weebly.com/uploads/1/3/0/7/130775370/fenis.pdf
- https://vogizezadu.weebly.com/uploads/1/3/0/8/130814341/posuxis-nidijomixuj.pdf
- https://jiwepurojal.weebly.com/uploads/1/3/0/7/130775762/3582991.pdf
- https://fuparududewon.weebly.com/uploads/1/3/1/8/131856041/5ba06.pdf
- https://gazesomudari.weebly.com/uploads/1/3/1/0/131070071/numegiw_denapilurom_gizewitupono.pdf
- https://tarirubawapub.weebly.com/uploads/1/3/1/6/131606173/rofulujo.pdf
- https://uploads.strikinglycdn.com/files/c0ed4daa-4c59-4b59-9513-1a177d377aef/wibezu.pdf
- https://uploads.strikinglycdn.com/files/48ba46f4-c079-4613-b447-39601dd0fe03/zunop.pdf
- https://cdn.shopify.com/s/files/1/0438/3775/1453/files/information_about_vermonts_state_tree.pdf
- https://cdn.shopify.com/s/files/1/0437/4963/8298/files/38594336863.pdf
- https://cdn.shopify.com/s/files/1/0496/1671/5927/files/physics_vectors_worksheet.pdf
- https://cdn.shopify.com/s/files/1/0497/3513/9477/files/daredevil_netflix_parents_guide.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
Embedded domains
- cctraff.ru
- cdn.shopify.com
- nagifinapu.weebly.com
- rimesozarabef.weebly.com
- vopevejefed.weebly.com
- reredutubonuki.weebly.com
- vogizezadu.weebly.com
- jiwepurojal.weebly.com
- fuparududewon.weebly.com
- gazesomudari.weebly.com
- tarirubawapub.weebly.com
- uploads.strikinglycdn.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report