MALICIOUS — 97333444964.pdf
MALICIOUS — 97333444964.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (78/100). 2 of 53 detection engines flagged it.
Identification
- SHA-256:
47f334d10e4a53eb6c6d163b8f54cab05ae938a79efbfa286f02540bb522dea0 - SHA-1:
d35de24a10f11644eea939812080a481fb7b0dee - MD5:
b4d8e53b0a92b2c1aa44be6174c8c1c8 - ssdeep:
1536:9GF1q/xyWmC7rSbYT/5+k2WGGSbhvidi:AF1q/x04/Ik2rFvZ - TLSH:
T19833AEF30067DC4C7ACF9B0369DA245A6086D3486A319BA4489D3BADC4BC77D7F50A50 - Submitted as: 97333444964.pdf
- File type: pdf · Size: 49847 bytes
- Verdict: malicious (78/100)
Detections (2 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
Why this verdict
The malicious score of 78/100 is the fusion of 5 weighted signals:
- Emsisoft (Emergency Kit) flagged PDF.Spam.Heur.1 (rule
PDF.Spam.Heur.1) - engine signal, weight 0.55, confidence 0.85 - MalwareAnalyser heuristics (entropy/packer) flagged high-entropy-blob (rule
high-entropy-blob) - engine signal, weight 0.35, confidence 0.70 - Embedded network infrastructure: https://cctraff.ru/strik?keyword=anti+blocking+system+pdf, https://uploads.strikinglycdn.com/files/0e5e52bd-730f-4877-a836-01f1a0e3655f/63768794845.pdf, https://uploads.strikinglycdn.com/files/9d48fff9-899e-4735-9f75-907568d39db7/70015447109.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/strik?keyword=anti+blocking+system+pdf
- https://uploads.strikinglycdn.com/files/0e5e52bd-730f-4877-a836-01f1a0e3655f/63768794845.pdf
- https://uploads.strikinglycdn.com/files/9d48fff9-899e-4735-9f75-907568d39db7/70015447109.pdf
- https://uploads.strikinglycdn.com/files/c340dac2-e88d-479f-9d0e-c1186ea5c721/5490377720.pdf
- https://uploads.strikinglycdn.com/files/16cc827d-9ef3-4284-a6ff-96194e96cd3c/76214339846.pdf
- https://uploads.strikinglycdn.com/files/3c92d53e-4c1a-47c0-be97-dee1495fba10/wefuninuladusodudotuloj.pdf
- https://site-1037245.mozfiles.com/files/1037245/43805706593.pdf
- https://site-1037152.mozfiles.com/files/1037152/51187405677.pdf
- https://cdn.shopify.com/s/files/1/0434/4204/5089/files/78225030891.pdf
- https://cdn.shopify.com/s/files/1/0428/0988/4838/files/49144266478.pdf
- https://cdn.shopify.com/s/files/1/0438/0049/4237/files/article_370_in_urdu_language.pdf
- https://cdn.shopify.com/s/files/1/0446/6376/7203/files/microelectronic_circuits_7th_edition_solutions_manual.pdf
- https://cdn.shopify.com/s/files/1/0434/2733/2245/files/abcd_2_song_mp4_bestwap.pdf
- https://site-1037091.mozfiles.com/files/1037091/dilozulasudukopupuk.pdf
- https://site-1036625.mozfiles.com/files/1036625/23586337912.pdf
- https://site-1037010.mozfiles.com/files/1037010/50243707076.pdf
- https://site-1037157.mozfiles.com/files/1037157/butoboboxixut.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/xap/1.0/mm/
- http://ns.adobe.com/xap/1.0/rights/
Embedded domains
- cctraff.ru
- uploads.strikinglycdn.com
- site-1037245.mozfiles.com
- site-1037152.mozfiles.com
- cdn.shopify.com
- site-1037091.mozfiles.com
- site-1036625.mozfiles.com
- site-1037010.mozfiles.com
- site-1037157.mozfiles.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report