SUSPICIOUS — wumunewubapux.pdf
SUSPICIOUS — wumunewubapux.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (58/100). 3 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
6c1de539d98f6c45f13e59945ff3bb642dea0d188f1b3ecb571c42d03945fc3c - SHA-1:
d39abf94045a87f047fb50097ca2078b1e02e96e - MD5:
51485edcd888ae0baddc442798c5946d - ssdeep:
768:QgGzpDIneMN7enZ/OxZNwYYCALRg62EOB4ABFwWQmfDvsqDL3mXDCVWBuVJ48:9GFMneMffWydrBbFwWQCDvss6DgauH48 - TLSH:
T18C329EF361A7ED8C3B4BAB079DB61599918AC74D3133EAA0048C762CC47C2BD6E15E10 - Submitted as: wumunewubapux.pdf
- File type: pdf · Size: 47234 bytes
- Verdict: suspicious (58/100)
Detections (3 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
MITRE ATT&CK
Why this verdict
The suspicious score of 58/100 is the fusion of 4 weighted signals:
- Embedded link rated suspicious by URL analysis: https://uploads.strikinglycdn.com/files/bf1100ae-7f32-4cf5-b025-eb83a4a198ea/90916896692.pdf - network signal, weight 0.40, confidence 0.60
- Embedded network infrastructure: https://cctraff.ru/strik?keyword=perimetro+de+un+poligono+geometria+analitica, https://cdn.shopify.com/s/files/1/0431/6948/0866/files/59216903706.pdf, https://cdn.shopify.com/s/files/1/0438/1225/7952/files/19848081924.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/strik?keyword=perimetro+de+un+poligono+geometria+analitica
- https://cdn.shopify.com/s/files/1/0431/6948/0866/files/59216903706.pdf
- https://cdn.shopify.com/s/files/1/0438/1225/7952/files/19848081924.pdf
- https://cdn.shopify.com/s/files/1/0432/8888/7460/files/biology_accelerated_study_guide.pdf
- https://cdn.shopify.com/s/files/1/0465/4311/0302/files/the_adventure_of_the_speckled_band_quiz.pdf
- https://cdn.shopify.com/s/files/1/0427/8855/2870/files/law_of_reflection_worksheet_answers.pdf
- https://mogilifus.weebly.com/uploads/1/3/0/7/130739831/f5d445.pdf
- https://fisotewefupug.weebly.com/uploads/1/3/1/0/131071176/topixovenojosan_supebo_xekafimeb_nilujam.pdf
- https://uploads.strikinglycdn.com/files/bf1100ae-7f32-4cf5-b025-eb83a4a198ea/90916896692.pdf
- https://uploads.strikinglycdn.com/files/32004465-9868-47fa-87d5-ad780a4a1bd3/lesaseninenigusususasin.pdf
- https://uploads.strikinglycdn.com/files/0a440a14-28f9-40c8-93b2-270f5da260fb/wakukufirilitepa.pdf
- https://uploads.strikinglycdn.com/files/ceaf7f81-9bea-4fa9-bb55-1502d2b223e8/siwatezizifimin.pdf
- https://uploads.strikinglycdn.com/files/c4bc4ffe-8bc6-414a-afff-f4b89ca469cf/fuburesojiwajugutanud.pdf
- https://uploads.strikinglycdn.com/files/04197ac7-3a21-4d83-8bbe-4e383c329b39/wuwenexezeluwizan.pdf
- https://uploads.strikinglycdn.com/files/c82bc70a-fc93-43b4-87cd-ae36b6db527e/57182649518.pdf
- https://uploads.strikinglycdn.com/files/bf56ec50-42c1-467b-9c08-b910eb024523/sejabaripujumez.pdf
- https://uploads.strikinglycdn.com/files/cb2d68e3-55a9-4051-b812-55030a66086c/40808398152.pdf
- https://uploads.strikinglycdn.com/files/46018c0a-9ea3-4f2f-9a69-e2a6484e1454/dekalulowitunixefakofex.pdf
- http://figuras-equivalentes.blogspot.com.es/
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/xap/1.0/mm/
- http://ns.adobe.com/xap/1.0/rights/
Embedded domains
- cctraff.ru
- cdn.shopify.com
- mogilifus.weebly.com
- fisotewefupug.weebly.com
- uploads.strikinglycdn.com
- figuras-equivalentes.blogspot.com.es
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report