MALICIOUS — types_of_chromosomal_disorders.pdf
MALICIOUS — types_of_chromosomal_disorders.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 3 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
6b5686bb0faa749a74c8c11e296c9612927032d84ccbc75c318f92f07817546e - SHA-1:
4d83b0afdb7a661c50cea0091f57e33b2663bfae - MD5:
8e9ec920d1ae53ab32abd4edf3607c7b - ssdeep:
768:8SgGzpDkpghW5Hpb3s781hlVlrFU0n/YEP2eUaalSsWfYWev4h7VovO1eD:8PGF4pghvyYKaaoXqYS8+eD - TLSH:
T11A318EF340A7DD4C7987EB13AEEF252A854E9B896136AB60459C673CC07C2BD3E00911 - Submitted as: types_of_chromosomal_disorders.pdf
- File type: pdf · Size: 42408 bytes
- Verdict: malicious (75/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://dedotomonifagax.weebly.com/uploads/1/3/1/6/131606429/2446307.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://gettraff.ru/pify?keyword=types+of+chromosomal+disorders+pdf, https://gimejexoxixaza.weebly.com/uploads/1/3/1/8/131872185/xojajuv-mitegejitokuxig.pdf, https://dedotomonifagax.weebly.com/uploads/1/3/1/6/131606429/2446307.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/pify?keyword=types+of+chromosomal+disorders+pdf
- https://gimejexoxixaza.weebly.com/uploads/1/3/1/8/131872185/xojajuv-mitegejitokuxig.pdf
- https://dedotomonifagax.weebly.com/uploads/1/3/1/6/131606429/2446307.pdf
- https://kilejotiwig.weebly.com/uploads/1/3/1/4/131406519/kerapawenojup.pdf
- https://cdn-cms.f-static.net/uploads/4369160/normal_5f88d314130eb.pdf
- https://cdn-cms.f-static.net/uploads/4368475/normal_5f87beabae9d1.pdf
- https://cdn-cms.f-static.net/uploads/4366637/normal_5f899496c130b.pdf
- https://cdn-cms.f-static.net/uploads/4371497/normal_5f889247210da.pdf
- https://cdn.shopify.com/s/files/1/0482/9636/2139/files/keller_auditorium_season_tickets.pdf
- https://cdn.shopify.com/s/files/1/0428/4104/7206/files/the_practice_of_everyday_life_michel_de_certeau_summary.pdf
- https://cdn.shopify.com/s/files/1/0440/7777/7061/files/relodegebalokex.pdf
- https://cdn.shopify.com/s/files/1/0438/0937/4368/files/orem_nursing_theory_application.pdf
- https://cdn.shopify.com/s/files/1/0481/9995/8680/files/finuxupefiwexadugewubakiw.pdf
- https://cdn.shopify.com/s/files/1/0499/4298/6903/files/sun_conure_beak_care.pdf
- https://cdn.shopify.com/s/files/1/0486/1840/6048/files/sopafowumalenazadezul.pdf
- https://cdn.shopify.com/s/files/1/0496/6206/6852/files/8th_grade_math_staar_practice_test.pdf
- https://cdn.shopify.com/s/files/1/0502/5654/3944/files/descargar_libro_3msc_gratis.pdf
- https://cdn.shopify.com/s/files/1/0485/0309/5457/files/rotary_district_7305.pdf
- https://uploads.strikinglycdn.com/files/71417879-7d3c-4779-a2fc-7e5475ffb6cb/narebatarebuxigipivetakog.pdf
- https://uploads.strikinglycdn.com/files/8df5c8f5-99af-4021-b1b1-14441a239b1e/66126448513.pdf
- https://uploads.strikinglycdn.com/files/9f4f93e2-0024-4ac1-b1dc-7c0c98d30024/25354979297.pdf
- https://uploads.strikinglycdn.com/files/99013a63-6abb-499e-b1ca-4cebb3dd3a44/52922165026.pdf
- https://uploads.strikinglycdn.com/files/6def4d0c-8552-4833-9ae5-35311ab7ddf8/lumelugebegosusutapep.pdf
Embedded domains
- gettraff.ru
- gimejexoxixaza.weebly.com
- dedotomonifagax.weebly.com
- kilejotiwig.weebly.com
- cdn-cms.f-static.net
- cdn.shopify.com
- uploads.strikinglycdn.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report