SUSPICIOUS — causes_of_world_war_1_dbq_answers.pdf
SUSPICIOUS — causes_of_world_war_1_dbq_answers.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (58/100). 3 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
9a20776a916834e76fafc17363cadfc4707f789860d7bae8188998ce6f119589 - SHA-1:
f474a480d0586a27c83575d969f678cc8354ed74 - MD5:
d66b69bd2cd898fed30585a60077bce6 - ssdeep:
768:NgGzpDopRzMJsdh7orqeBMFM+zy/INyJ21iQ6m34CwrA:uGFMpOJ88rIRyJ21itm5wrA - TLSH:
T10A318DF300E7FD4C7A8ADB07AEBA14A9508AD24D61369B90458C773CC1BCBBD2E10951 - Submitted as: causes_of_world_war_1_dbq_answers.pdf
- File type: pdf · Size: 40885 bytes
- Verdict: suspicious (58/100)
Detections (3 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
MITRE ATT&CK
Why this verdict
The suspicious score of 58/100 is the fusion of 4 weighted signals:
- Embedded link rated suspicious by URL analysis: https://uploads.strikinglycdn.com/files/24870f9c-9424-4bd0-bf60-46491ac1eec7/53614214350.pdf - network signal, weight 0.40, confidence 0.60
- Embedded network infrastructure: https://ggtraff.ru/strik?keyword=causes+of+world+war+1+dbq+answers, https://buluzuzumaz.weebly.com/uploads/1/3/1/6/131636727/c372e.pdf, https://finiluxexolije.weebly.com/uploads/1/3/1/8/131856594/nuzup-fosujego-semokeropazade-kaxuzoxuzexiwus.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://ggtraff.ru/strik?keyword=causes+of+world+war+1+dbq+answers
- https://buluzuzumaz.weebly.com/uploads/1/3/1/6/131636727/c372e.pdf
- https://finiluxexolije.weebly.com/uploads/1/3/1/8/131856594/nuzup-fosujego-semokeropazade-kaxuzoxuzexiwus.pdf
- https://jeponiruwapin.weebly.com/uploads/1/3/0/7/130776483/ludawaxed_ritazi_pixoxir_visutan.pdf
- https://jarapitoxedomel.weebly.com/uploads/1/3/1/4/131437170/e968eae6e.pdf
- https://uploads.strikinglycdn.com/files/24870f9c-9424-4bd0-bf60-46491ac1eec7/53614214350.pdf
- https://uploads.strikinglycdn.com/files/1fe3bffc-44cb-41fe-9bb2-218bbfb742c3/1897650768.pdf
- https://kuvofexe.weebly.com/uploads/1/3/1/1/131163751/padunako.pdf
- https://gutugifowofe.weebly.com/uploads/1/3/1/6/131606479/zanarutoverurinewa.pdf
- https://natizupasa.weebly.com/uploads/1/3/1/4/131437725/jukos-wewatinexa.pdf
- https://cdn.shopify.com/s/files/1/0439/6374/4414/files/26228680611.pdf
- https://cdn.shopify.com/s/files/1/0483/1035/4075/files/apprentice_s_15e_manual.pdf
- https://cdn.shopify.com/s/files/1/0431/8475/0747/files/gugowawene.pdf
- https://batarodev.weebly.com/uploads/1/3/1/3/131380453/jigoziridawat.pdf
- https://jelamiwigu.weebly.com/uploads/1/3/1/3/131382248/lelemunazixato.pdf
- https://jakedekokobara.weebly.com/uploads/1/3/1/3/131381480/zanadutut_wexudafenatogun_jetomefoja.pdf
- https://jakedekokobara.weebly.com/uploads/1/3/1/3/131381480/xududev-ledavodu-jatulivarolaxe-bixebenal.pdf
- https://dubuzosokiboxof.weebly.com/uploads/1/3/1/1/131163723/1beae7928cd13.pdf
- https://uploads.strikinglycdn.com/files/c1dfb886-6414-4130-8e7b-5d095186c9e1/8852058403.pdf
- https://uploads.strikinglycdn.com/files/dba915a0-2cc4-42d5-a4ac-dc5859dc0696/new_gundam_breaker_patch.pdf
- https://uploads.strikinglycdn.com/files/2fc3a6af-3869-4052-b84d-0de400745c6c/32476996693.pdf
- https://uploads.strikinglycdn.com/files/85a6687e-6152-4abc-a4c7-8f132c5b6cf0/sobapufisurixiki.pdf
- https://uploads.strikinglycdn.com/files/3e6811f5-77c7-463e-b791-950b706ae816/8449090787.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
Embedded domains
- ggtraff.ru
- buluzuzumaz.weebly.com
- finiluxexolije.weebly.com
- jeponiruwapin.weebly.com
- jarapitoxedomel.weebly.com
- uploads.strikinglycdn.com
- kuvofexe.weebly.com
- gutugifowofe.weebly.com
- natizupasa.weebly.com
- cdn.shopify.com
- batarodev.weebly.com
- jelamiwigu.weebly.com
- jakedekokobara.weebly.com
- dubuzosokiboxof.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report