MALICIOUS — kixanimenenoz.pdf
MALICIOUS — kixanimenenoz.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
96fa0412230383f12c29e13bc7b00372b11e6cfd379a0096dc6b2d7a7e13e430 - SHA-1:
a170fb54aa6a4b94f66cc3e0895970535c7c08b1 - MD5:
af7bd432c1b1069c2569a5b1d0243edf - ssdeep:
1536:1GFZpL8QNc39dpH10Yxr4Kfo1tR8V+1BP7jfmptGX/:IFZpL8ccB17x28QBTKt4 - TLSH:
T15C35AFF310A7ED8CBA874753ACA621992196C78DA327976014983B7DD4BC3BD7F10821 - Submitted as: kixanimenenoz.pdf
- File type: pdf · Size: 59382 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://lagukekejase.weebly.com/uploads/1/3/0/8/130815031/d2c849.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://ggtraff.ru/wb?keyword=projeto%20social%20pronto, https://lagukekejase.weebly.com/uploads/1/3/0/8/130815031/d2c849.pdf, https://fumadutukit.weebly.com/uploads/1/3/1/4/131437402/15d46d119932.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://ggtraff.ru/wb?keyword=projeto%20social%20pronto
- https://lagukekejase.weebly.com/uploads/1/3/0/8/130815031/d2c849.pdf
- https://fumadutukit.weebly.com/uploads/1/3/1/4/131437402/15d46d119932.pdf
- https://ranerenonosojib.weebly.com/uploads/1/3/1/4/131483420/6206458.pdf
- https://jaserasozupog.weebly.com/uploads/1/3/1/4/131454215/8160160.pdf
- https://mogilifus.weebly.com/uploads/1/3/0/7/130739831/sixukejomiwewanage.pdf
- https://site-1039515.mozfiles.com/files/1039515/73086051649.pdf
- https://site-1038612.mozfiles.com/files/1038612/taluborof.pdf
- https://site-1044202.mozfiles.com/files/1044202/vunupi.pdf
- https://site-1038351.mozfiles.com/files/1038351/19700332007.pdf
- https://site-1043403.mozfiles.com/files/1043403/26132481842.pdf
- https://site-1036987.mozfiles.com/files/1036987/rikemojoxomurobuzabejet.pdf
- https://site-1040319.mozfiles.com/files/1040319/tagimuraxomajuvowe.pdf
- https://site-1042011.mozfiles.com/files/1042011/88070113233.pdf
- https://site-1042501.mozfiles.com/files/1042501/fuwereritijagapuweg.pdf
- https://site-1042360.mozfiles.com/files/1042360/tiduwagomijesisilobom.pdf
- https://zoxuzuxebexot.weebly.com/uploads/1/3/0/9/130969059/3532345.pdf
- https://kuromazu.weebly.com/uploads/1/3/2/6/132695519/fuporefufulipebega.pdf
- https://xojerajap.weebly.com/uploads/1/3/1/3/131384359/zokare.pdf
- https://vimiwegom.weebly.com/uploads/1/3/0/7/130775837/4247606.pdf
- https://pojutawetuje.weebly.com/uploads/1/3/1/3/131382470/fcf478893917733.pdf
- https://xuvakaxatal.weebly.com/uploads/1/3/1/0/131070170/29932f71.pdf
- https://ridolagu.weebly.com/uploads/1/3/0/7/130775195/e09811dcb321b.pdf
- https://cdn.shopify.com/s/files/1/0465/2780/7646/files/algebra_1_chapter_7_worksheet_answers.pdf
- https://cdn.shopify.com/s/files/1/0484/2451/7790/files/3354826765.pdf
Embedded domains
- ggtraff.ru
- lagukekejase.weebly.com
- fumadutukit.weebly.com
- ranerenonosojib.weebly.com
- jaserasozupog.weebly.com
- mogilifus.weebly.com
- site-1039515.mozfiles.com
- site-1038612.mozfiles.com
- site-1044202.mozfiles.com
- site-1038351.mozfiles.com
- site-1043403.mozfiles.com
- site-1036987.mozfiles.com
- site-1040319.mozfiles.com
- site-1042011.mozfiles.com
- site-1042501.mozfiles.com
- site-1042360.mozfiles.com
- zoxuzuxebexot.weebly.com
- kuromazu.weebly.com
- xojerajap.weebly.com
- vimiwegom.weebly.com
- pojutawetuje.weebly.com
- xuvakaxatal.weebly.com
- ridolagu.weebly.com
- cdn.shopify.com
- www.w3.org
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report