MALICIOUS — 1068965.pdf
MALICIOUS — 1068965.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (70/100). 3 of 50 detection engines flagged it.
Identification
- SHA-256:
5a72ff508aae68d050de15dce89da8d0eb5cd1611cf2a5a435bfec19de13a375 - SHA-1:
ea3c3c90af5fbfd2133e4a24140fed53c3c13357 - MD5:
d45b4de70014897be2a9b7962cec3da2 - ssdeep:
768:UgGzpD6p5RfhVnnLGHck9SgGSZtomTYZFXtr2jEPMNhBZLxgGBi28M4r5nAZ:hGF2pL4/omsZFXJkEPMvDxgGBaFrtAZ - TLSH:
T1DD318EF310A3FD8C7A8FAF039EAB115D6449D38861369590558C362CD47C9FD6F00A65 - Submitted as: 1068965.pdf
- File type: pdf · Size: 42210 bytes
- Verdict: malicious (70/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): UDS:Trojan.PDF.SBadur.gen
Why this verdict
The malicious score of 70/100 is the fusion of 4 weighted signals:
- Emsisoft (Emergency Kit) flagged PDF.Spam.Heur.1 (rule
PDF.Spam.Heur.1) - engine signal, weight 0.55, confidence 0.85 - Embedded network infrastructure: https://cctraff.ru/wb?keyword=fronius%20symo%205.%200%20datasheet, https://cdn.shopify.com/s/files/1/0488/4080/2469/files/manigaxilibexera.pdf, https://cdn.shopify.com/s/files/1/0496/6701/4819/files/biology_chapter_13_power_notes_answer_key.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=fronius%20symo%205.%200%20datasheet
- https://cdn.shopify.com/s/files/1/0488/4080/2469/files/manigaxilibexera.pdf
- https://cdn.shopify.com/s/files/1/0496/6701/4819/files/biology_chapter_13_power_notes_answer_key.pdf
- https://cdn.shopify.com/s/files/1/0481/6656/8087/files/frigidaire_affinity_electric_dryer_e64_code.pdf
- https://cdn.shopify.com/s/files/1/0496/2484/2391/files/can_board_members_fire_codes.pdf
- https://cdn.shopify.com/s/files/1/0479/4148/4700/files/board_formed_concrete_wall.pdf
- https://uploads.strikinglycdn.com/files/2ca7ed1f-1a10-41ea-be0c-00cd353a0e13/19916653758.pdf
- https://uploads.strikinglycdn.com/files/1571246f-4df6-4a15-8899-221ab551170b/pijewegaxibanovalunugup.pdf
- https://bedizegoresupa.weebly.com/uploads/1/3/1/3/131379398/3794757.pdf
- https://dutitujazekap.weebly.com/uploads/1/3/0/8/130814390/tunitulo.pdf
- https://riwisasivituw.weebly.com/uploads/1/3/1/0/131070703/9193731.pdf
- https://kesevaze.weebly.com/uploads/1/3/1/3/131383297/vibaxalu.pdf
- https://xetutinafo.weebly.com/uploads/1/3/0/7/130775845/kawiganatunovigefuf.pdf
- https://molisemopum.weebly.com/uploads/1/3/1/4/131437834/bamunaw.pdf
- https://dutitujazekap.weebly.com/uploads/1/3/0/8/130814390/0c18874847f.pdf
- https://jaserasozupog.weebly.com/uploads/1/3/1/4/131454215/gefudigoramoju.pdf
- https://cdn.shopify.com/s/files/1/0500/2441/5382/files/osrs_13_def_pure_guide.pdf
- https://cdn.shopify.com/s/files/1/0477/5631/2732/files/43832426784.pdf
- https://cdn.shopify.com/s/files/1/0499/8673/2194/files/10_22_bolt_release.pdf
- https://cdn.shopify.com/s/files/1/0435/3071/5288/files/majority_rule_in_company_law.pdf
- https://cdn.shopify.com/s/files/1/0435/5879/7471/files/jiruz.pdf
- https://cdn.shopify.com/s/files/1/0465/2780/7646/files/taken_with_a_grain_of_salt_in_romana.pdf
- https://cdn.shopify.com/s/files/1/0496/5236/7509/files/whole_brain_teaching_book.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
Embedded domains
- cctraff.ru
- cdn.shopify.com
- uploads.strikinglycdn.com
- bedizegoresupa.weebly.com
- dutitujazekap.weebly.com
- riwisasivituw.weebly.com
- kesevaze.weebly.com
- xetutinafo.weebly.com
- molisemopum.weebly.com
- jaserasozupog.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report