MALICIOUS — wijusijoderaja.pdf
MALICIOUS — wijusijoderaja.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 3 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
8c02aa8f2c6c89ab3dfa1dc9fc263fdd1009693dae4ab27cf45f5e7aeea67c1e - SHA-1:
9090dbfefb10e1cb8e5d3d624dc54e4fa9271ac1 - MD5:
f74b58013c4b9624508f8bb7b955d679 - ssdeep:
768:k+gGzpDUpYQNYwyKeeqi7+b67cvXUJZg6IdIwtJhlP+ZM4dHxMx27k1Zgb6s0Wi2:KGF4pYbSqv2cfRdPYDRA27k1S6s0Wi2 - TLSH:
T1F2337DF350A3ED4CBB9F5B139EA7115C908AD7896136A7A00089677CD0BC6FD2F10926 - Submitted as: wijusijoderaja.pdf
- File type: pdf · Size: 49629 bytes
- Verdict: malicious (75/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://fizolapojola.weebly.com/uploads/1/3/1/3/131383549/rexubim.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://ggtraff.ru/strik?keyword=comic+book+download+android, https://site-1043576.mozfiles.com/files/1043576/4530963769.pdf, https://site-1042205.mozfiles.com/files/1042205/robuvosaditivizimuxurud.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://ggtraff.ru/strik?keyword=comic+book+download+android
- https://site-1043576.mozfiles.com/files/1043576/4530963769.pdf
- https://site-1042205.mozfiles.com/files/1042205/robuvosaditivizimuxurud.pdf
- https://site-1048452.mozfiles.com/files/1048452/11613584070.pdf
- https://site-1042671.mozfiles.com/files/1042671/91235810798.pdf
- https://site-1040080.mozfiles.com/files/1040080/gezab.pdf
- https://jawasolasazilem.weebly.com/uploads/1/3/1/3/131379174/9232432.pdf
- https://dojudiwoju.weebly.com/uploads/1/3/1/4/131406456/vedus-jolizo-gipomodena-rivuvoz.pdf
- https://wepugimi.weebly.com/uploads/1/3/1/0/131070973/jabizujikegob.pdf
- https://fizolapojola.weebly.com/uploads/1/3/1/3/131383549/rexubim.pdf
- https://rolosakuzorega.weebly.com/uploads/1/3/1/3/131379035/8909761.pdf
- https://bedizegoresupa.weebly.com/uploads/1/3/1/3/131379398/zanazanekoxel.pdf
- https://zevigetadafuwun.weebly.com/uploads/1/3/0/9/130969942/9516062.pdf
- https://cdn-cms.f-static.net/uploads/4366388/normal_5f88c0077e79e.pdf
- https://cdn-cms.f-static.net/uploads/4366348/normal_5f88bfafa3f36.pdf
- https://cdn-cms.f-static.net/uploads/4367650/normal_5f8879b69cd4d.pdf
- https://cdn-cms.f-static.net/uploads/4366364/normal_5f873982053a9.pdf
- https://cdn-cms.f-static.net/uploads/4369507/normal_5f88ba4d52bdc.pdf
- https://uploads.strikinglycdn.com/files/b77912c9-95d4-42d3-8ad2-19e9783b7d8d/topujikakakubevi.pdf
- https://uploads.strikinglycdn.com/files/3e021155-ccea-4fd6-b443-f7e0c29263b5/63903799716.pdf
- https://uploads.strikinglycdn.com/files/db44406b-19d3-4a97-bc1a-f3b3ac50179a/wiwafomite.pdf
- https://site-1043374.mozfiles.com/files/1043374/pewajowoxelizuj.pdf
- https://site-1048194.mozfiles.com/files/1048194/96088766301.pdf
- https://site-1041412.mozfiles.com/files/1041412/vefedevobugebosusegu.pdf
- https://site-1040297.mozfiles.com/files/1040297/vijopitetilogezuvur.pdf
Embedded domains
- ggtraff.ru
- site-1043576.mozfiles.com
- site-1042205.mozfiles.com
- site-1048452.mozfiles.com
- site-1042671.mozfiles.com
- site-1040080.mozfiles.com
- jawasolasazilem.weebly.com
- dojudiwoju.weebly.com
- wepugimi.weebly.com
- fizolapojola.weebly.com
- rolosakuzorega.weebly.com
- bedizegoresupa.weebly.com
- zevigetadafuwun.weebly.com
- cdn-cms.f-static.net
- uploads.strikinglycdn.com
- site-1043374.mozfiles.com
- site-1048194.mozfiles.com
- site-1041412.mozfiles.com
- site-1040297.mozfiles.com
- site-1038309.mozfiles.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report