MALICIOUS — zion_episcopal_church_wappingers_falls_ny.pdf
MALICIOUS — zion_episcopal_church_wappingers_falls_ny.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 3 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
5135e2994959bb8b460b69cebc76214424239fbeacf2a2cb83ca5d1756b542dd - SHA-1:
e5743a65d609e0669fe55c72be6106c3345e207e - MD5:
143b17740d03a2c29d94c18e40f23d9d - ssdeep:
768:EgGzpD2h80PjeDmyUOgBrDrL0JzgCK+FDY5Pig2XELYsSTPH2i:xGFih8cfLWzgClpCag24YPH2i - TLSH:
T1A3327BF360E7ED8C7E875B03ACAB2168918AC74C22769B60448C767DD07C6FD6E10961 - Submitted as: zion_episcopal_church_wappingers_falls_ny.pdf
- File type: pdf · Size: 44745 bytes
- Verdict: malicious (75/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://dutitujazekap.weebly.com/uploads/1/3/0/8/130814390/4056517.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://ggtraff.ru/strik?keyword=zion+episcopal+church+wappingers+falls+ny, https://cdn-cms.f-static.net/uploads/4373504/normal_5f9330bdc0432.pdf, https://cdn-cms.f-static.net/uploads/4377101/normal_5f9380b6442ca.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://ggtraff.ru/strik?keyword=zion+episcopal+church+wappingers+falls+ny
- https://s3.amazonaws.com/magapeguwabe/hp_application_lifecycle_management_administrator_guide.pdf
- https://s3.amazonaws.com/fujadabez/joguj.pdf
- https://s3.amazonaws.com/sugosubexez/pdf_splitter_free_download_for_windows_10.pdf
- https://s3.amazonaws.com/fejenijovekozu/reasoning_backwards_gregg_young.pdf
- https://s3.amazonaws.com/rizezobabub/45188355326.pdf
- https://cdn-cms.f-static.net/uploads/4373504/normal_5f9330bdc0432.pdf
- https://cdn-cms.f-static.net/uploads/4377101/normal_5f9380b6442ca.pdf
- https://cdn-cms.f-static.net/uploads/4374175/normal_5f8f5c7eb8f03.pdf
- https://cdn-cms.f-static.net/uploads/4371508/normal_5f8965ac468cb.pdf
- https://pevugubak.weebly.com/uploads/1/3/2/7/132740457/pefogotibisu_todarurako.pdf
- https://dutitujazekap.weebly.com/uploads/1/3/0/8/130814390/4056517.pdf
- https://bitekiparoduj.weebly.com/uploads/1/3/4/0/134017536/zizarep_vasizesamudire_legegezanoxi_galegudido.pdf
- https://uploads.strikinglycdn.com/files/3ff18e6b-1b15-4b3e-8599-f39950d9bc95/zuweguladesolazilus.pdf
- https://uploads.strikinglycdn.com/files/e6e0540b-8315-4818-a921-2a0fadb1845b/54223117812.pdf
- https://uploads.strikinglycdn.com/files/1a1a9793-280a-4879-a30a-297c34dee1fe/namedotimasuxanugesive.pdf
- https://uploads.strikinglycdn.com/files/31a8a57c-c8d1-490f-904e-fd57d40e5c78/bofadafimubavepumojizugi.pdf
- https://uploads.strikinglycdn.com/files/68b0353d-bfbd-45e3-b8a1-0762327d841e/48820541277.pdf
- https://uploads.strikinglycdn.com/files/9bd15bf2-3395-41c8-a53f-4a931ceb53fc/88145214645.pdf
- https://uploads.strikinglycdn.com/files/033f9e46-8cd4-488d-9890-f11425465568/89150922931.pdf
- https://uploads.strikinglycdn.com/files/40ac4d6d-b6a3-450e-8f3f-7bb7f21c8e74/rinutumasopi.pdf
- https://uploads.strikinglycdn.com/files/f3258526-24be-4350-a510-efb1d03c74b8/93036754513.pdf
- https://uploads.strikinglycdn.com/files/82761543-117f-4be9-9690-6a49045335ac/xibenunozetovibuvupiwe.pdf
- https://s3.amazonaws.com/biwuwukesazef/historia_del_bautismo_catolico.pdf
- https://s3.amazonaws.com/susopuzupure/citalopram_celexa_davis.pdf
Embedded domains
- ggtraff.ru
- s3.amazonaws.com
- cdn-cms.f-static.net
- pevugubak.weebly.com
- dutitujazekap.weebly.com
- bitekiparoduj.weebly.com
- uploads.strikinglycdn.com
- 4.ai
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report