SUSPICIOUS — 83848144748.pdf

SUSPICIOUS — 83848144748.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 2 of 53 detection engines flagged it.

Identification

• SHA-256: 76369d908dc3af5d7eee7ca4ff37c949eb624d4d3e28cbb1be738633c2940939
• SHA-1: cb517408d4a8b67d175f99308d8740111b3b93c6
• MD5: 0f02f3ce1168ba37c2753d43863ee69d
• ssdeep: 1536:0GFke5WdDblH8GdDrRRtV5W5vntKbFy3J:BFkeEdPlcGdDrRVWvntKhY
• TLSH: T12434AFF30067EDCD2ACBEF4779EB11592045D5C82126AAA049C87B6CD87C6BDAF10B50
• Submitted as: 83848144748.pdf
• File type: pdf · Size: 54491 bytes
• Verdict: suspicious (44/100)

Detections (2 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Emsisoft (Emergency Kit): PDF.Spam.Heur.1

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

• Embedded network infrastructure: https://cctraff.ru/strik?keyword=resoudre+systeme+4+equations+4+inconnues+pdf, https://cdn.shopify.com/s/files/1/0465/2384/2718/files/29232722318.pdf, https://cdn.shopify.com/s/files/1/0494/1132/6119/files/11111639482.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis (windows)

0 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

Embedded URLs

• https://cctraff.ru/strik?keyword=resoudre+systeme+4+equations+4+inconnues+pdf
• https://cdn.shopify.com/s/files/1/0465/2384/2718/files/29232722318.pdf
• https://cdn.shopify.com/s/files/1/0494/1132/6119/files/11111639482.pdf
• https://cdn.shopify.com/s/files/1/0467/9722/6133/files/bogudavetenejolazuweze.pdf
• https://cdn.shopify.com/s/files/1/0433/7182/3262/files/81613275106.pdf
• https://cdn.shopify.com/s/files/1/0438/4161/8082/files/96447103178.pdf
• https://cdn.shopify.com/s/files/1/0433/0615/6190/files/39504990002.pdf
• https://cdn.shopify.com/s/files/1/0437/3220/5722/files/weledovimetomidikolopon.pdf
• https://cdn.shopify.com/s/files/1/0433/9436/7655/files/89760631366.pdf
• https://cdn.shopify.com/s/files/1/0480/6046/5316/files/supanifuwenenuki.pdf
• https://cdn.shopify.com/s/files/1/0427/5778/3718/files/fasoxizokikeg.pdf
• https://cdn.shopify.com/s/files/1/0484/0921/5134/files/kajisusejalugede.pdf
• https://cdn.shopify.com/s/files/1/0434/3840/7845/files/wosutobagiko.pdf
• https://cdn.shopify.com/s/files/1/0430/9362/2935/files/determine_the_tension_in_each_cable_and_the_components_of_reaction_at_d_needed_to_support_the_load.pdf
• http://www.w3.org/1999/02/22-rdf-syntax-ns#
• http://purl.org/dc/elements/1.1/
• http://ns.adobe.com/pdf/1.3/
• http://ns.adobe.com/xap/1.0/
• http://ns.adobe.com/xap/1.0/mm/
• http://ns.adobe.com/xap/1.0/rights/

Embedded domains

• cctraff.ru
• cdn.shopify.com
• www.w3.org
• purl.org
• ns.adobe.com

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report