SUSPICIOUS — 703040.pdf
SUSPICIOUS — 703040.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (58/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
93b58ff165aee13c567e1150980fd5e6ae95901a76ebe9088675c961bd478790 - SHA-1:
23e73332082ee7a07e63d7433ab435a0af91eb3a - MD5:
3043f821aa0904e71ca5da05c8fc7ae5 - ssdeep:
768:fgGzpDVex7IiGNvgtXcbrt2puHMDJfvNOrSK/HZ+WS9G8m/rT:oGFBex0IvDBc5vZ9S9G8mjT - TLSH:
T1A4327DF310A7ED9C7A8FAF43ADEB01986045D649613386A044A9772CD57C6FD7F00A22 - Submitted as: 703040.pdf
- File type: pdf · Size: 45903 bytes
- Verdict: suspicious (58/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The suspicious score of 58/100 is the fusion of 4 weighted signals:
- Embedded link rated suspicious by URL analysis: https://pavowojavujide.weebly.com/uploads/1/3/1/3/131398322/dobixun.pdf - network signal, weight 0.40, confidence 0.60
- Embedded network infrastructure: https://ggtraff.ru/wb?keyword=maxon%E2%80%99%20s%20cinebench, https://cdn.shopify.com/s/files/1/0494/1748/6503/files/desert_rose_franciscan_dinnerware_price_guide.pdf, https://cdn.shopify.com/s/files/1/0482/0054/8504/files/prealgebra_and_introductory_algebra_3rd_edition.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://ggtraff.ru/wb?keyword=maxon%E2%80%99%20s%20cinebench
- https://cdn.shopify.com/s/files/1/0494/1748/6503/files/desert_rose_franciscan_dinnerware_price_guide.pdf
- https://cdn.shopify.com/s/files/1/0482/0054/8504/files/prealgebra_and_introductory_algebra_3rd_edition.pdf
- https://cdn.shopify.com/s/files/1/0480/7557/1364/files/acura_cl_manual_transmission.pdf
- https://pavowojavujide.weebly.com/uploads/1/3/1/3/131398322/dobixun.pdf
- https://site-1038440.mozfiles.com/files/1038440/15315166465.pdf
- https://site-1040239.mozfiles.com/files/1040239/95733729531.pdf
- https://site-1039413.mozfiles.com/files/1039413/nebabekemupurowepofoleji.pdf
- https://site-1038691.mozfiles.com/files/1038691/44926126106.pdf
- https://site-1040396.mozfiles.com/files/1040396/fuwij.pdf
- https://site-1040180.mozfiles.com/files/1040180/34863614017.pdf
- https://site-1041587.mozfiles.com/files/1041587/42668090026.pdf
- https://site-1040670.mozfiles.com/files/1040670/20645832418.pdf
- https://dutitujazekap.weebly.com/uploads/1/3/0/8/130814390/xereromejiv-koxozirusoror-moxonujis.pdf
- https://juragubiv.weebly.com/uploads/1/3/0/8/130874328/velukuziralijomem.pdf
- https://uploads.strikinglycdn.com/files/65d46fc3-db1d-4c86-a373-e0982d9cfc7a/69729060294.pdf
- https://uploads.strikinglycdn.com/files/723c8a25-51eb-4dd3-b747-6e18c8ff4b05/xotufubowu.pdf
- https://uploads.strikinglycdn.com/files/65beb069-8566-451f-b325-126d9a5a82be/17423790762.pdf
- https://uploads.strikinglycdn.com/files/176204bd-7346-430e-87d8-6d53acfa53e8/kizemezubutedutiwal.pdf
- https://uploads.strikinglycdn.com/files/264100ac-5c60-47d0-9d6d-df31146fde69/busozewub.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/pdf/1.3/
- http://ns.adobe.com/xap/1.0/
- http://ns.adobe.com/xap/1.0/mm/
Embedded domains
- ggtraff.ru
- cdn.shopify.com
- pavowojavujide.weebly.com
- site-1038440.mozfiles.com
- site-1040239.mozfiles.com
- site-1039413.mozfiles.com
- site-1038691.mozfiles.com
- site-1040396.mozfiles.com
- site-1040180.mozfiles.com
- site-1041587.mozfiles.com
- site-1040670.mozfiles.com
- dutitujazekap.weebly.com
- juragubiv.weebly.com
- uploads.strikinglycdn.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report