SUSPICIOUS — descargar_gta_vice_city_gratis.pdf
SUSPICIOUS — descargar_gta_vice_city_gratis.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 3 of 50 detection engines flagged it.
Identification
- SHA-256:
92a38aa13b4f46abc8cdf9e8299ec954d676ac5f46a0c94e29f770904f571b1a - SHA-1:
aefbbfe6c617064980cd57c7e06ae8f5af7987b0 - MD5:
bcb09568ebb4cd1a252a344cdd88c57d - ssdeep:
768:ngGzpDup/QCs2KteL7w+UIs8PHsjUu7R5rIAjip3HqW2gqXVB9jQjiVcs38sbQd:gGFypflsqHMUqRjmJKUQVBVQja38sbi - TLSH:
T1EA328EF30087ED4C7A8A5F476EFF115CA586C7896126E2A058D87B2CC07C5ED7E11A60 - Submitted as: descargar_gta_vice_city_gratis.pdf
- File type: pdf · Size: 45842 bytes
- Verdict: suspicious (44/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: https://gettraff.ru/strik?keyword=descargar+gta+vice+city+gratis, https://uploads.strikinglycdn.com/files/9bb32d4d-72ed-4f21-bc9d-b352d8ed9518/gutevepazixakofuwa.pdf, https://uploads.strikinglycdn.com/files/6948223a-d339-4700-818b-20fb8764ea07/tubac_arizona_photos_city.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/strik?keyword=descargar+gta+vice+city+gratis
- https://uploads.strikinglycdn.com/files/9bb32d4d-72ed-4f21-bc9d-b352d8ed9518/gutevepazixakofuwa.pdf
- https://uploads.strikinglycdn.com/files/6948223a-d339-4700-818b-20fb8764ea07/tubac_arizona_photos_city.pdf
- https://uploads.strikinglycdn.com/files/5ceebd4a-4669-4097-92b0-70df7f9245a6/criminal_minds_season_7_episode_19.pdf
- https://cdn.shopify.com/s/files/1/0435/0597/5462/files/718818131.pdf
- https://cdn.shopify.com/s/files/1/0500/3028/0864/files/91554273817.pdf
- https://s3.amazonaws.com/mufukep/lymph_nodes_of_head_and_neck.pdf
- https://s3.amazonaws.com/wonoti/bacteremia_e_septicemia.pdf
- https://s3.amazonaws.com/gajabedafot/edit_text_in_acrobat_x_pro.pdf
- https://s3.amazonaws.com/pazifetanegapu/88466501301.pdf
- https://s3.amazonaws.com/kulinisokakewi/49480400066.pdf
- https://cdn-cms.f-static.net/uploads/4368978/normal_5f91f7dde94b9.pdf
- https://cdn-cms.f-static.net/uploads/4369914/normal_5f94e70cb160b.pdf
- https://cdn-cms.f-static.net/uploads/4366327/normal_5f8983107b784.pdf
- https://cdn-cms.f-static.net/uploads/4374535/normal_5f8caa016ad5c.pdf
- https://cdn.shopify.com/s/files/1/0428/9737/5388/files/76021564292.pdf
- https://cdn.shopify.com/s/files/1/0503/0743/2631/files/topatobitatenezejaki.pdf
- https://cdn.shopify.com/s/files/1/0438/5662/5829/files/nudatixexunudipipanenuz.pdf
- https://s3.amazonaws.com/susopuzupure/baxumojevin.pdf
- https://s3.amazonaws.com/nonabafat/jises.pdf
- https://s3.amazonaws.com/tetazino/biological_science_1_2_download.pdf
- https://s3.amazonaws.com/memul/arariba_plus_matematica_7_ano.pdf
- https://s3.amazonaws.com/felasorarabipis/globalism_nationalism_tribalism.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
Embedded domains
- gettraff.ru
- uploads.strikinglycdn.com
- cdn.shopify.com
- s3.amazonaws.com
- cdn-cms.f-static.net
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report