MALICIOUS — 2748195.pdf
MALICIOUS — 2748195.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 3 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
8f12da1e99ba849a336dada7dd9d2efe68a7db49f66927b83d3d15660ff4f359 - SHA-1:
05c9e6ea9a2465b2641724657a3b4d05ca7b7db6 - MD5:
04909ad62a940a51429220368e9cf482 - ssdeep:
768:ygGzpDbp26YpJd2uas3FL0hVqTM6nDeagiZbZBYKtl3xyxmb9UDN:vGF3p2nl8VqQ6n5dt0otxyEb9UDN - TLSH:
T15B329EF310D3EC8C7A8A5B47AEA7149D7496938820369360949C7A2DC57C7FD6F00B62 - Submitted as: 2748195.pdf
- File type: pdf · Size: 46447 bytes
- Verdict: malicious (75/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): UDS:Trojan.PDF.SBadur.gen
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://netaluzubik.weebly.com/uploads/1/3/0/8/130813777/9183548.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/wb?keyword=korg%20krome%20ex%20manual, https://gumomamomav.weebly.com/uploads/1/3/1/3/131398069/6005561.pdf, https://fopimakalegej.weebly.com/uploads/1/3/0/7/130738542/guguxepejuwo_subuzome_pebamofej_mokifazi.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=korg%20krome%20ex%20manual
- https://gumomamomav.weebly.com/uploads/1/3/1/3/131398069/6005561.pdf
- https://fopimakalegej.weebly.com/uploads/1/3/0/7/130738542/guguxepejuwo_subuzome_pebamofej_mokifazi.pdf
- https://viweposedijul.weebly.com/uploads/1/3/1/0/131070314/kefud_libepoj.pdf
- https://zugufavowi.weebly.com/uploads/1/3/0/8/130874222/8556245.pdf
- https://netaluzubik.weebly.com/uploads/1/3/0/8/130813777/woduvotakoxare-kenakomo.pdf
- https://uploads.strikinglycdn.com/files/0d28f67b-41c7-48aa-a4ed-82ea1d0a42d0/mukuda.pdf
- https://gewosawoma.weebly.com/uploads/1/3/0/7/130739201/sodidapesed-levevew-sagus-wokufafavi.pdf
- https://kidunaxu.weebly.com/uploads/1/3/1/4/131437100/fitijarus-lukefemiruf-zujemilewo.pdf
- https://netaluzubik.weebly.com/uploads/1/3/0/8/130813777/9183548.pdf
- https://fanavepuru.weebly.com/uploads/1/3/1/8/131871984/gipopodenuvet-viwarizu-xepigegububi.pdf
- https://kabudededawizo.weebly.com/uploads/1/3/1/3/131383409/6079293.pdf
- https://jakedekokobara.weebly.com/uploads/1/3/1/3/131381480/busixakowun_zefisuni.pdf
- https://uploads.strikinglycdn.com/files/c2c564a9-07e9-482d-97e5-d7631e1bdd89/natozimijenawimekofe.pdf
- https://uploads.strikinglycdn.com/files/5ff0d641-7fad-4828-97bb-4e9dfa095be7/kerukaxijadipoluzeromite.pdf
- https://uploads.strikinglycdn.com/files/42865a15-659c-4e56-a4fc-fe044c4db507/gefitili.pdf
- https://uploads.strikinglycdn.com/files/e58f7d37-6e62-46d1-915f-04c5bebe0c3e/fujefirumubijifos.pdf
- https://uploads.strikinglycdn.com/files/a17325e0-95e3-4c2b-a2f5-e4ede9589afb/goffman_stigma_download.pdf
- https://uploads.strikinglycdn.com/files/35ba29bd-113c-4c8a-967e-6caf5bf8fd48/32485418353.pdf
- https://uploads.strikinglycdn.com/files/a0382de9-721e-4392-8b82-f9fbf8ceb261/bajadume.pdf
- https://uploads.strikinglycdn.com/files/facfba5b-bb5c-46fb-9c8f-2d4a8f705b70/dagisimoginirovavibug.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/
Embedded domains
- cctraff.ru
- gumomamomav.weebly.com
- fopimakalegej.weebly.com
- viweposedijul.weebly.com
- zugufavowi.weebly.com
- netaluzubik.weebly.com
- uploads.strikinglycdn.com
- gewosawoma.weebly.com
- kidunaxu.weebly.com
- fanavepuru.weebly.com
- kabudededawizo.weebly.com
- jakedekokobara.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report