MALICIOUS — manerutuj.pdf
MALICIOUS — manerutuj.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 3 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
75171631fd5904ff337c761c0aa4b7926339bfcc1d6075ceced1b9239d466102 - SHA-1:
0eaf9c52dc59b9eee1f57a7013b81c313dd681d5 - MD5:
57a959c57cec375f5adf59496f850a52 - ssdeep:
768:fgGzpDSpCKs0R7vsp7qr11sDZj1hdp9NlFn1vAoBCuYEYD1/P1qHxVR:oGFep/RD1sV1hb9NlFn1vAIX01/dqHxH - TLSH:
T116328DF3449BEC8C7A879B476DBA25696589934C6236A31058CC773DC0BC6ADBF10930 - Submitted as: manerutuj.pdf
- File type: pdf · Size: 46387 bytes
- Verdict: malicious (75/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: flagged
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://kokubexajaluk.weebly.com/uploads/1/3/2/6/132681668/48bf5ee956e.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/wb?keyword=4%20grade%20math%20worksheets%20printable, https://uploads.strikinglycdn.com/files/caf575fa-c68a-4dee-a412-b20d414d24ee/diponiwuropo.pdf, https://uploads.strikinglycdn.com/files/4a9995a7-1008-4727-abda-fb818ec86bd2/xewenedagetajebomudijetow.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=4%20grade%20math%20worksheets%20printable
- https://uploads.strikinglycdn.com/files/caf575fa-c68a-4dee-a412-b20d414d24ee/diponiwuropo.pdf
- https://uploads.strikinglycdn.com/files/4a9995a7-1008-4727-abda-fb818ec86bd2/xewenedagetajebomudijetow.pdf
- https://uploads.strikinglycdn.com/files/62679b3f-a28c-46c4-86f8-31e6ff80f97f/lean_in_15_turkey_burgers.pdf
- https://uploads.strikinglycdn.com/files/0379b80d-4d90-46fa-8362-a5cb89008ecd/fijupamunu.pdf
- https://uploads.strikinglycdn.com/files/af7f33a2-9be4-4f60-84cb-9099dfb7fe07/degefalewafatijizix.pdf
- https://s3.amazonaws.com/badodemebo/aggressive_driving_behavior_scale.pdf
- https://s3.amazonaws.com/mijedusovineti/ar_rahman_terjemahan.pdf
- https://uploads.strikinglycdn.com/files/cafae68d-32db-44d5-bc61-573ff04e503d/xalid.pdf
- https://uploads.strikinglycdn.com/files/39517de3-ad6d-4f51-8718-7b08d0481246/3480353242.pdf
- https://s3.amazonaws.com/wonoti/printable_monthly_attendance_sheet.pdf
- https://s3.amazonaws.com/teximikamukubo/tough_quantitative_aptitude_questions.pdf
- https://s3.amazonaws.com/leguvefu/analogias_ejemplos_resueltos.pdf
- https://s3.amazonaws.com/tesodagiwor/naruzaxuzimesaroxuzol.pdf
- https://s3.amazonaws.com/gozilum/mipuginofubedewim.pdf
- https://s3.amazonaws.com/wonoti/analog_electronics_mcqs_with_answers.pdf
- https://s3.amazonaws.com/kudefem/architecture_engineer_cv.pdf
- https://s3.amazonaws.com/wilugugo/fobadutizi.pdf
- https://s3.amazonaws.com/leguvefu/depopizixoxoxonilula.pdf
- https://xujaxivef.weebly.com/uploads/1/3/1/4/131438557/faxifulusu.pdf
- https://kokubexajaluk.weebly.com/uploads/1/3/2/6/132681668/48bf5ee956e.pdf
- https://wuzafonufiza.weebly.com/uploads/1/3/4/3/134341979/kigoze.pdf
- https://misutinulil.weebly.com/uploads/1/3/1/4/131407711/fcbbd6f.pdf
- https://kisogegexene.weebly.com/uploads/1/3/4/3/134374262/zopadukurasalibabef.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
Embedded domains
- cctraff.ru
- uploads.strikinglycdn.com
- s3.amazonaws.com
- xujaxivef.weebly.com
- kokubexajaluk.weebly.com
- wuzafonufiza.weebly.com
- misutinulil.weebly.com
- kisogegexene.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report