MALICIOUS — vurinom.pdf
MALICIOUS — vurinom.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
4c09a9b4c0a70d750c44ed449b002229abd0e9890225732a37cbd2234c0d6de0 - SHA-1:
a852e45f515cb02a471909b43158f7f2f51373c5 - MD5:
8ba5e20b5e634b4b010481dadd6c2129 - ssdeep:
1536:jGFNpBVojPBoNX0MyL20K9mxLog5fzSv:yFNpIbBoN1yL6g1JfK - TLSH:
T14334ADF340D7DD4CBA8A9B13AEE711AE645AD388A036976084DC773CC47C2AC7E14821 - Submitted as: vurinom.pdf
- File type: pdf · Size: 57441 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://genigudepa.weebly.com/uploads/1/3/1/0/131070712/ff06dfdf.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://gettraff.ru/wb?keyword=landscape%20fixes%20for%20grass%20mods, https://cdn-cms.f-static.net/uploads/4366308/normal_5f87dae361bf9.pdf, https://cdn-cms.f-static.net/uploads/4365549/normal_5f8701fe99d4b.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/wb?keyword=landscape%20fixes%20for%20grass%20mods
- https://cdn-cms.f-static.net/uploads/4366308/normal_5f87dae361bf9.pdf
- https://cdn-cms.f-static.net/uploads/4365549/normal_5f8701fe99d4b.pdf
- https://cdn-cms.f-static.net/uploads/4365586/normal_5f87d504bdac9.pdf
- https://xebikazogede.weebly.com/uploads/1/3/2/7/132740990/05d8e0.pdf
- https://dimaxafazeza.weebly.com/uploads/1/3/1/4/131453031/kezedivalo-bolumukejufufik.pdf
- https://genigudepa.weebly.com/uploads/1/3/1/0/131070712/ff06dfdf.pdf
- https://jenafowumavadas.weebly.com/uploads/1/3/1/4/131437472/zokufij.pdf
- https://pevugubak.weebly.com/uploads/1/3/2/7/132740457/zevoginagetutag.pdf
- https://site-1043335.mozfiles.com/files/1043335/88647132868.pdf
- https://site-1043096.mozfiles.com/files/1043096/lomorilofukolel.pdf
- https://site-1043790.mozfiles.com/files/1043790/52272881351.pdf
- https://uploads.strikinglycdn.com/files/8925337c-c870-4e33-bce0-465a1182fd29/liwig.pdf
- https://uploads.strikinglycdn.com/files/2acdedcb-a425-4879-a678-34050cad6630/3865596395.pdf
- https://uploads.strikinglycdn.com/files/74690b13-2136-431f-9715-46f7c7201c2c/9236645951.pdf
- https://uploads.strikinglycdn.com/files/ff57eabd-5a17-4ae2-884e-61e645a08acc/78468704462.pdf
- https://uploads.strikinglycdn.com/files/45d2c667-7275-4c73-80fa-e1232c5d906a/mazotafetogarezot.pdf
- https://tajurasexir.weebly.com/uploads/1/3/1/6/131606020/2739071.pdf
- https://wivupenoremew.weebly.com/uploads/1/3/0/7/130775018/556513d9d52f.pdf
- https://wekubuzebebam.weebly.com/uploads/1/3/0/7/130739705/9ab65b04f6b.pdf
- https://wonigebegi.weebly.com/uploads/1/3/1/6/131606731/dawezuvupulun.pdf
- https://pejopazuzaguwoz.weebly.com/uploads/1/3/2/8/132815183/0b7569b25.pdf
- https://fadusoga.weebly.com/uploads/1/3/0/7/130739873/tozizibuxiwo-zitemo-wewijunofe.pdf
- https://rawofaweka.weebly.com/uploads/1/3/0/7/130775842/5502308.pdf
- https://rawofaweka.weebly.com/uploads/1/3/0/7/130775842/30ecc18e0d.pdf
Embedded domains
- gettraff.ru
- cdn-cms.f-static.net
- xebikazogede.weebly.com
- dimaxafazeza.weebly.com
- genigudepa.weebly.com
- jenafowumavadas.weebly.com
- pevugubak.weebly.com
- site-1043335.mozfiles.com
- site-1043096.mozfiles.com
- site-1043790.mozfiles.com
- uploads.strikinglycdn.com
- tajurasexir.weebly.com
- wivupenoremew.weebly.com
- wekubuzebebam.weebly.com
- wonigebegi.weebly.com
- pejopazuzaguwoz.weebly.com
- fadusoga.weebly.com
- rawofaweka.weebly.com
- jukafubu.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report