MALICIOUS — putoropetemija.pdf
MALICIOUS — putoropetemija.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
52888691a9276467b629ef1e6b8db4d3fe4acd628f99f4b84d81e1f6201406ac - SHA-1:
6614a949d3fc71cf54cd84862b76f56110e381cf - MD5:
e6c8d355286c89d58b6a19feba1cf485 - ssdeep:
768:dgGzpDRp4eOM5jwljZvd1SFaGcOXYNVu+W7YAxFS:eGFVpHkl1v3SRcOXYNV5ULxFS - TLSH:
T1ED327BF31097ED8CBECB9F93ADAB1695A189D3C87136865044C8672DC4BC6AD7F01821 - Submitted as: putoropetemija.pdf
- File type: pdf · Size: 45706 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://kenilajapa.weebly.com/uploads/1/3/1/0/131069910/lojowuzesewat_tuxabikugu_wepapemefik_vizepibodu.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://ggtraff.ru/wb?keyword=manualidades%20sencillas%20de%20oto%C3%B1o%20para%20ni%C3%B1os, https://zeronifoza.weebly.com/uploads/1/3/4/3/134312515/sidojukulu-ruvedikole.pdf, https://kenilajapa.weebly.com/uploads/1/3/1/0/131069910/lojowuzesewat_tuxabikugu_wepapemefik_vizepibodu.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://ggtraff.ru/wb?keyword=manualidades%20sencillas%20de%20oto%C3%B1o%20para%20ni%C3%B1os
- https://zeronifoza.weebly.com/uploads/1/3/4/3/134312515/sidojukulu-ruvedikole.pdf
- https://kenilajapa.weebly.com/uploads/1/3/1/0/131069910/lojowuzesewat_tuxabikugu_wepapemefik_vizepibodu.pdf
- https://vozunutav.weebly.com/uploads/1/3/0/9/130969695/213014ded6f138.pdf
- https://wevuviwujito.weebly.com/uploads/1/3/1/6/131636984/705ec1e3dc.pdf
- https://fotejisatowonu.weebly.com/uploads/1/3/2/3/132302873/wimujolukuripi_juzad_nibusafero_kugegi.pdf
- https://kexazupaxi.weebly.com/uploads/1/3/3/9/133997339/modemivowute-kolamivaxiderix-viraxiso.pdf
- https://fipaziditude.weebly.com/uploads/1/3/4/4/134465794/rotesijava.pdf
- https://mamunazeve.weebly.com/uploads/1/3/0/8/130814121/pawugirijosapo_pimaliveju_zabepopegazeg.pdf
- https://giwakatunu.weebly.com/uploads/1/3/1/4/131437107/woxesegela.pdf
- https://polabufasol.weebly.com/uploads/1/3/2/8/132814050/f759c9.pdf
- https://uploads.strikinglycdn.com/files/483e8730-104a-45a0-9293-1b5279d6cb41/denesopipipedapumad.pdf
- https://uploads.strikinglycdn.com/files/5b683e3d-5d2d-467a-b216-9f2a537f7e43/35900397911.pdf
- https://uploads.strikinglycdn.com/files/d54add5b-afe5-478d-a268-9717f3ebd963/23013550966.pdf
- https://uploads.strikinglycdn.com/files/227d1666-c8f0-401a-bd56-6b4d56c0cb3f/35263844346.pdf
- https://s3.amazonaws.com/gupuso/55708129587.pdf
- https://s3.amazonaws.com/libowebujakux/40788235635.pdf
- https://s3.amazonaws.com/vaxebisapesi/carbon_steel_types.pdf
- https://s3.amazonaws.com/jenisozazewubo/aprender_hablar_ingles.pdf
- https://uploads.strikinglycdn.com/files/bcc6f0f6-e394-4ad6-8624-1ac2fc1dbc38/tobonanebijusub.pdf
- https://uploads.strikinglycdn.com/files/d48e499f-38a9-4a44-9c1b-263ce757438b/28955624189.pdf
- https://s3.amazonaws.com/mijedusovineti/tilufu.pdf
- https://s3.amazonaws.com/kijelopazekune/80972728328.pdf
- https://s3.amazonaws.com/sedimeraxufi/auto_repair_shop_business_plan_sample.pdf
- https://s3.amazonaws.com/pevuwarobuvowa/architectural_acoustics_book.pdf
Embedded domains
- ggtraff.ru
- zeronifoza.weebly.com
- kenilajapa.weebly.com
- vozunutav.weebly.com
- wevuviwujito.weebly.com
- fotejisatowonu.weebly.com
- kexazupaxi.weebly.com
- fipaziditude.weebly.com
- mamunazeve.weebly.com
- giwakatunu.weebly.com
- polabufasol.weebly.com
- uploads.strikinglycdn.com
- s3.amazonaws.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report