SUSPICIOUS — 7114ee1.pdf
SUSPICIOUS — 7114ee1.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 2 of 50 detection engines flagged it.
Identification
- SHA-256:
50f36a29e13b7efc0663e1cf6f517d60ec682643a1d5ff14ba348e7d8704f3e9 - SHA-1:
0fa059628d58d9ee9c1176cef9859172cd532698 - MD5:
2d9ddb2ca9be0ae6bd587a55fc3f25d3 - ssdeep:
768:egGzpDUpRRdiGwEI+h50v5pxfiGvXqKZ3lPc4goG/tlRcgy:bGFoproXb9pBiGvXqKfPFHyRcgy - TLSH:
T17A328DF78897ED4C3E8BEB03ADEB1559918AC38C213A9754498D772CC5BC27D6E00990 - Submitted as: 7114ee1.pdf
- File type: pdf · Size: 45583 bytes
- Verdict: suspicious (44/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: https://gettraff.ru/wb?keyword=general%20electric%204-device%20universal%20remote%20control%20codes, https://uploads.strikinglycdn.com/files/58176c0d-25d4-4c8b-a3ce-ce47c907e675/15599697504.pdf, https://uploads.strikinglycdn.com/files/ff96e211-45e9-47a5-9b5f-5a7c7359bc47/93059576675.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/wb?keyword=general%20electric%204-device%20universal%20remote%20control%20codes
- https://uploads.strikinglycdn.com/files/58176c0d-25d4-4c8b-a3ce-ce47c907e675/15599697504.pdf
- https://uploads.strikinglycdn.com/files/ff96e211-45e9-47a5-9b5f-5a7c7359bc47/93059576675.pdf
- https://uploads.strikinglycdn.com/files/3670efab-6ffe-4c00-9407-16a5ecee74bb/wesuwunaxo.pdf
- https://uploads.strikinglycdn.com/files/becc6644-b53e-4683-be59-2a290f8b3c56/solomimobalufevebe.pdf
- https://uploads.strikinglycdn.com/files/ae5f418d-56b6-4802-b68f-7736486d4441/vapisokowuvupu.pdf
- https://uploads.strikinglycdn.com/files/46f7e573-09a1-43ca-9413-0896c98c1af4/xadid.pdf
- https://uploads.strikinglycdn.com/files/48305c73-3783-4d1c-9164-f78b3e01c444/patemapovas.pdf
- https://uploads.strikinglycdn.com/files/8b9745d5-d513-4fd2-bc67-3b7085ea7fe2/98906254432.pdf
- https://uploads.strikinglycdn.com/files/df3371fb-2f63-44fd-ac7c-2b3f84e5c56c/libajofuk.pdf
- https://sesuwulot.weebly.com/uploads/1/3/1/4/131438847/sesapilegipe.pdf
- https://jawasolasazilem.weebly.com/uploads/1/3/1/3/131379174/9232432.pdf
- https://site-1039813.mozfiles.com/files/1039813/wotipugalib.pdf
- https://site-1048559.mozfiles.com/files/1048559/50313961960.pdf
- https://site-1039417.mozfiles.com/files/1039417/vafaguwenetowesasodab.pdf
- https://uploads.strikinglycdn.com/files/d21276f3-f332-4661-a86b-f965fa6aa302/81211385400.pdf
- https://uploads.strikinglycdn.com/files/083a3b07-8ac5-4f09-ade4-b5464c06937b/11542573087.pdf
- https://uploads.strikinglycdn.com/files/5e3e5347-3414-4987-bf1b-2725bc310caf/27875133558.pdf
- https://uploads.strikinglycdn.com/files/8182a76b-311d-4377-955c-d56ef2b44bf1/92568238357.pdf
- https://babikovinemixe.weebly.com/uploads/1/3/1/8/131856339/zevarezoj.pdf
- https://jakedekokobara.weebly.com/uploads/1/3/1/3/131381480/10610.pdf
- https://genigudepa.weebly.com/uploads/1/3/1/0/131070712/tifuxasorelav-sunagutigu-gikisifexixabot.pdf
- https://wepugimi.weebly.com/uploads/1/3/1/0/131070973/739bdf.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
Embedded domains
- gettraff.ru
- uploads.strikinglycdn.com
- sesuwulot.weebly.com
- jawasolasazilem.weebly.com
- site-1039813.mozfiles.com
- site-1048559.mozfiles.com
- site-1039417.mozfiles.com
- babikovinemixe.weebly.com
- jakedekokobara.weebly.com
- genigudepa.weebly.com
- wepugimi.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report