SUSPICIOUS — 976fb5.pdf
SUSPICIOUS — 976fb5.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 2 of 50 detection engines flagged it.
Identification
- SHA-256:
839476d49bc939e0d20441862e97183753ede5ab6636efd8f68947e14253986f - SHA-1:
ce3b79aa78b3cc3c11857639df9f24b88136d0f8 - MD5:
913448013d9062715ae1ae259ff6ae92 - ssdeep:
768:CgGzpD0pvyb408KXjOKGCUN6kkjYlKILDijFVR/HP3uXsYVtgnpqy:fGF4plKG/NVk0lKyijFTAsznpqy - TLSH:
T133338DF35097ED4CBA8A9B039DF72649515AC74C6233A750848C376CD57CABEBE00861 - Submitted as: 976fb5.pdf
- File type: pdf · Size: 48258 bytes
- Verdict: suspicious (44/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: https://gettraff.ru/wb?keyword=zigfried%20von%20schroeder%20deck, https://site-1039222.mozfiles.com/files/1039222/82285210068.pdf, https://site-1043321.mozfiles.com/files/1043321/17737841089.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/wb?keyword=zigfried%20von%20schroeder%20deck
- https://site-1039222.mozfiles.com/files/1039222/82285210068.pdf
- https://site-1043321.mozfiles.com/files/1043321/17737841089.pdf
- https://site-1039529.mozfiles.com/files/1039529/kerex.pdf
- https://site-1048265.mozfiles.com/files/1048265/14788728691.pdf
- https://uploads.strikinglycdn.com/files/63d00356-a825-4d00-9a95-099560275875/meposawevi.pdf
- https://uploads.strikinglycdn.com/files/af099e2a-9582-4387-919c-311a362488fd/97424510013.pdf
- https://uploads.strikinglycdn.com/files/ab0971a8-5054-4a7e-8c25-1ec1d8ed5301/musekelepaboxezi.pdf
- https://site-1041857.mozfiles.com/files/1041857/gezonagabenaselakijogija.pdf
- https://site-1036725.mozfiles.com/files/1036725/28275900001.pdf
- https://site-1048445.mozfiles.com/files/1048445/zajepinovawigufogediri.pdf
- https://site-1042277.mozfiles.com/files/1042277/897568533.pdf
- https://lixaworone.weebly.com/uploads/1/3/1/8/131871871/wimizuniku.pdf
- https://fobewesepujub.weebly.com/uploads/1/3/2/3/132303403/ac7a055ad1.pdf
- https://genigudepa.weebly.com/uploads/1/3/1/0/131070712/vovofofaverun_sawivurovoj_nifawubazox.pdf
- https://zafozudakajadev.weebly.com/uploads/1/3/0/8/130814863/b628c54eef4e3.pdf
- https://jezaxegare.weebly.com/uploads/1/3/1/3/131380636/latugisokum.pdf
- https://site-1039360.mozfiles.com/files/1039360/7021296983.pdf
- https://site-1043328.mozfiles.com/files/1043328/84535020199.pdf
- https://site-1038768.mozfiles.com/files/1038768/pivugofuzepisajewoje.pdf
- https://site-1038872.mozfiles.com/files/1038872/bupafevubepudogigixusogul.pdf
- https://site-1039789.mozfiles.com/files/1039789/25494032928.pdf
- https://site-1043088.mozfiles.com/files/1043088/72342072554.pdf
- https://site-1043545.mozfiles.com/files/1043545/egglettes_microwave_egg_sandwich_cooker_instructions.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
Embedded domains
- gettraff.ru
- site-1039222.mozfiles.com
- site-1043321.mozfiles.com
- site-1039529.mozfiles.com
- site-1048265.mozfiles.com
- uploads.strikinglycdn.com
- site-1041857.mozfiles.com
- site-1036725.mozfiles.com
- site-1048445.mozfiles.com
- site-1042277.mozfiles.com
- lixaworone.weebly.com
- fobewesepujub.weebly.com
- genigudepa.weebly.com
- zafozudakajadev.weebly.com
- jezaxegare.weebly.com
- site-1039360.mozfiles.com
- site-1043328.mozfiles.com
- site-1038768.mozfiles.com
- site-1038872.mozfiles.com
- site-1039789.mozfiles.com
- site-1043088.mozfiles.com
- site-1043545.mozfiles.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report