MALICIOUS — vuxikiru_motupaza.pdf
MALICIOUS — vuxikiru_motupaza.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 3 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
51b316c2f58e9693fe07f32c4f242daab83adbab4d7f7363822910c26f5c3e08 - SHA-1:
836ea484a86eac8909d628a24a1ce8b4d68395c2 - MD5:
49e150289a4f3a38cc4692e77b8ffaaf - ssdeep:
768:HgGzpDDeq8aiNbN4ZneAK3xnTvrQ95iftDCLOEGMQ9ioIWeebepMwcO87BB:AGFXebdTTQ9wpSXlpebemwcO87 - TLSH:
T181348EF31093DD4C3B8B6F47AEA715A9618AC3886236979055C8772CC4BC6EC7F11A21 - Submitted as: vuxikiru_motupaza.pdf
- File type: pdf · Size: 55010 bytes
- Verdict: malicious (75/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): UDS:Trojan.PDF.SBadur.gen
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://keniwuki.weebly.com/uploads/1/3/1/4/131483234/3cb113af6.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/wb?keyword=manual%20de%20usuario%20samsung%20j7%20prime, https://gejatovuri.weebly.com/uploads/1/3/1/4/131406669/4cfce8f56c.pdf, https://keniwuki.weebly.com/uploads/1/3/1/4/131483234/3cb113af6.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=manual%20de%20usuario%20samsung%20j7%20prime
- https://gejatovuri.weebly.com/uploads/1/3/1/4/131406669/4cfce8f56c.pdf
- https://keniwuki.weebly.com/uploads/1/3/1/4/131483234/3cb113af6.pdf
- https://xobesatiwum.weebly.com/uploads/1/3/4/3/134359431/gekis.pdf
- https://wavuvavezexa.weebly.com/uploads/1/3/0/7/130775629/5199135.pdf
- https://xivixomepovi.weebly.com/uploads/1/3/4/5/134518427/fevagefu_sumozipexajuzo_jisujo.pdf
- https://uploads.strikinglycdn.com/files/348064d7-75a1-44cc-879c-07b7c6a5f257/who_is_max_s_mom_disney.pdf
- https://uploads.strikinglycdn.com/files/8cbe1f3a-cc2f-4afe-9e7e-0c5b18ecfaa5/bamogozulawumuzigavu.pdf
- https://uploads.strikinglycdn.com/files/0f853168-b87e-43c2-9dd2-a5c4c3a3de02/zosiwezajova.pdf
- https://uploads.strikinglycdn.com/files/5b204d7d-25de-467c-b8dc-46a337b03846/8767252118.pdf
- https://uploads.strikinglycdn.com/files/2460dc87-01dc-43a1-88dc-2ca99ef7a6e6/5052025936.pdf
- https://cdn-cms.f-static.net/uploads/4369782/normal_5f896efc49f37.pdf
- https://cdn-cms.f-static.net/uploads/4382965/normal_5f8f9bffa90ee.pdf
- https://cdn-cms.f-static.net/uploads/4385648/normal_5f9518fe43497.pdf
- https://cdn-cms.f-static.net/uploads/4367923/normal_5f87a86b073ec.pdf
- https://uploads.strikinglycdn.com/files/7680c2f6-208f-47ca-acdb-9ab1fb684325/jerefaxolekizuvudaw.pdf
- https://uploads.strikinglycdn.com/files/4ae48e16-bfc5-42f2-a8ba-8bc2676e6698/xevave.pdf
- https://botubadixebom.weebly.com/uploads/1/3/1/4/131407995/vanetigut-jowiv-reralizisovuzox.pdf
- https://xojerajap.weebly.com/uploads/1/3/1/3/131384359/foburadip.pdf
- https://fovavizudaz.weebly.com/uploads/1/3/4/3/134375550/tefev.pdf
- https://zuzuxaze.weebly.com/uploads/1/3/4/0/134040629/19df205.pdf
- https://vewutaniwem.weebly.com/uploads/1/3/0/8/130873717/kalunasegove.pdf
- https://cdn-cms.f-static.net/uploads/4375361/normal_5f9049a987ceb.pdf
- https://cdn-cms.f-static.net/uploads/4366360/normal_5f885b37695eb.pdf
- https://cdn-cms.f-static.net/uploads/4365545/normal_5f8a15e3177bf.pdf
Embedded domains
- cctraff.ru
- gejatovuri.weebly.com
- keniwuki.weebly.com
- xobesatiwum.weebly.com
- wavuvavezexa.weebly.com
- xivixomepovi.weebly.com
- uploads.strikinglycdn.com
- cdn-cms.f-static.net
- botubadixebom.weebly.com
- xojerajap.weebly.com
- fovavizudaz.weebly.com
- zuzuxaze.weebly.com
- vewutaniwem.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report