MALICIOUS — fazodagudaxuwadovej.pdf
MALICIOUS — fazodagudaxuwadovej.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 3 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
6815a9669c1044d11c47c022a52cb8ba65842f994b369c13bc9ac8b646b82185 - SHA-1:
2c56b3480811c25d5cda105c444998c34bedff60 - MD5:
9b68c2630e71b38453c2d275d30727c2 - ssdeep:
768:lgGzpDONl6+IkqACinJkXUgGzVVSo+dlYMddiORQyIU6V:2GFC7nk+jgYMdd1vIU6V - TLSH:
T15A318DF30097ED8C7A8BAB036EAB255E508AD74D6133E7500988B72DD4BC5ED7E11860 - Submitted as: fazodagudaxuwadovej.pdf
- File type: pdf · Size: 40185 bytes
- Verdict: malicious (75/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: flagged
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://pepisukuwen.weebly.com/uploads/1/3/1/6/131606293/569218d1.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/wb?keyword=sheth%20publication%20fybcom%20books%20pdf%20free%20download, https://xogexemufak.weebly.com/uploads/1/3/1/4/131437987/pukufodez-puxew-xazoku.pdf, https://tedumuwoke.weebly.com/uploads/1/3/1/3/131397970/gawegurovagutakav.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=sheth%20publication%20fybcom%20books%20pdf%20free%20download
- https://xogexemufak.weebly.com/uploads/1/3/1/4/131437987/pukufodez-puxew-xazoku.pdf
- https://tedumuwoke.weebly.com/uploads/1/3/1/3/131397970/gawegurovagutakav.pdf
- https://misikeni.weebly.com/uploads/1/3/4/3/134336029/bitikaxipi.pdf
- https://jubunukaf.weebly.com/uploads/1/3/1/4/131483214/4807418.pdf
- https://fakimodixoto.weebly.com/uploads/1/3/0/7/130739088/ac55e21f4d19.pdf
- https://miremewokar.weebly.com/uploads/1/3/0/7/130738658/zadabanab.pdf
- https://babikovinemixe.weebly.com/uploads/1/3/1/8/131856339/634dd37b34e5.pdf
- https://pepisukuwen.weebly.com/uploads/1/3/1/6/131606293/569218d1.pdf
- https://sivirezu.weebly.com/uploads/1/3/4/4/134445297/9180147.pdf
- https://duvonejubuzal.weebly.com/uploads/1/3/4/3/134321315/2193261.pdf
- https://bizetuxerupa.weebly.com/uploads/1/3/0/8/130873791/2184701391efe58.pdf
- https://xawuwotogot.weebly.com/uploads/1/3/2/6/132695388/pamijutafilinud_dodolamu_vipububemad_wofenira.pdf
- https://xomevore.weebly.com/uploads/1/3/4/3/134346529/ce95bbec87fa457.pdf
- https://uploads.strikinglycdn.com/files/d2c388ca-70ad-42aa-a00a-d7cf6bd08a9e/sovemunaw.pdf
- https://uploads.strikinglycdn.com/files/707c487a-5b3e-4fc1-b70b-ec57c470872e/vomuzasejogulovosugemir.pdf
- https://s3.amazonaws.com/laradusa/data_structures_and_algorithms_course.pdf
- https://s3.amazonaws.com/remufuzu/bickerstaff_neurological_examination.pdf
- https://s3.amazonaws.com/fekaduvopigab/ethnic_groups_in_conflict.pdf
- https://s3.amazonaws.com/jufowokedunod/adjective_clause_download.pdf
- https://cdn.shopify.com/s/files/1/0436/2990/4032/files/bible_study_workbooks.pdf
- https://cdn.shopify.com/s/files/1/0505/0748/1258/files/ibps_clerk_pre_practice_set.pdf
- https://cdn.shopify.com/s/files/1/0266/8757/0105/files/redijegetarelov.pdf
- https://cdn.shopify.com/s/files/1/0492/7481/4620/files/the_great_prank_war_apk.pdf
- https://cdn.shopify.com/s/files/1/0493/1711/8111/files/nadazevir.pdf
Embedded domains
- cctraff.ru
- xogexemufak.weebly.com
- tedumuwoke.weebly.com
- misikeni.weebly.com
- jubunukaf.weebly.com
- fakimodixoto.weebly.com
- miremewokar.weebly.com
- babikovinemixe.weebly.com
- pepisukuwen.weebly.com
- sivirezu.weebly.com
- duvonejubuzal.weebly.com
- bizetuxerupa.weebly.com
- xawuwotogot.weebly.com
- xomevore.weebly.com
- uploads.strikinglycdn.com
- s3.amazonaws.com
- cdn.shopify.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report