MALICIOUS — navosa.pdf
MALICIOUS — navosa.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (71/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
9b70e865a571a9f907fb27e746f529d702b41626fde4f003cafc1c15373881a8 - SHA-1:
51cf4c7b47b123d3f2b7482272ce59f1419c246e - MD5:
9b9cc29a398c830ec2efbd3b46cc4369 - ssdeep:
768:YgGzpDBeyf0cVQYFjsrfBha8Nh1s5K8eqAwjWqQl8dO7qT5Hw+BnY:1GFleu0BOoD8JRjJO8JQyY - TLSH:
T124324AF340A7ED4C7A8BDB03ADAB395E6089DB48613297644488A72CC8BC77D3F41915 - Submitted as: navosa.pdf
- File type: pdf · Size: 45630 bytes
- Verdict: malicious (71/100)
Detections (2 of 50 engines)
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
MITRE ATT&CK
Why this verdict
The malicious score of 71/100 is the fusion of 3 weighted signals:
- Embedded link rated malicious by URL analysis: https://jumuwubugunitus.weebly.com/uploads/1/3/1/0/131070493/xepak.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://gettraff.ru/strik?keyword=emco+star+2020+pdf, https://jiwepurojal.weebly.com/uploads/1/3/0/7/130775762/kunuliwakemeso.pdf, https://kupugaxome.weebly.com/uploads/1/3/0/9/130969415/nokekul-feboji.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/strik?keyword=emco+star+2020+pdf
- https://jiwepurojal.weebly.com/uploads/1/3/0/7/130775762/kunuliwakemeso.pdf
- https://kupugaxome.weebly.com/uploads/1/3/0/9/130969415/nokekul-feboji.pdf
- https://jumuwubugunitus.weebly.com/uploads/1/3/1/0/131070493/xepak.pdf
- https://lodirunesu.weebly.com/uploads/1/3/0/8/130874391/2d2b07cd700b241.pdf
- https://biwugina.weebly.com/uploads/1/3/1/1/131163984/bogitasubitenawutaka.pdf
- https://liwevapazu.weebly.com/uploads/1/3/1/0/131071299/1315167.pdf
- https://zesopupejilit.weebly.com/uploads/1/3/0/7/130738861/bfaf9.pdf
- https://fodezamu.weebly.com/uploads/1/3/1/4/131407453/1000608.pdf
- https://dimaxafazeza.weebly.com/uploads/1/3/1/4/131453031/2697538.pdf
- https://kupugaxome.weebly.com/uploads/1/3/0/9/130969415/webuligavedike.pdf
- https://site-1040597.mozfiles.com/files/1040597/wesigujixi.pdf
- https://site-1038344.mozfiles.com/files/1038344/bitonasupajisigogenene.pdf
- https://site-1041491.mozfiles.com/files/1041491/81157512047.pdf
- https://site-1038693.mozfiles.com/files/1038693/44329166182.pdf
- https://site-1042349.mozfiles.com/files/1042349/sadedisulexoguleni.pdf
- https://zapirawega.weebly.com/uploads/1/3/0/9/130969804/f6b5c62.pdf
- https://jawasolasazilem.weebly.com/uploads/1/3/1/3/131379174/3722212.pdf
- https://vuzevarezevarot.weebly.com/uploads/1/3/0/7/130740461/ed77146280debe4.pdf
- https://jakedekokobara.weebly.com/uploads/1/3/1/3/131381480/1d44b872.pdf
- https://fupexorugukemig.weebly.com/uploads/1/3/0/8/130814763/megotiwobiwovewabun.pdf
- https://uploads.strikinglycdn.com/files/916e372b-ce14-4008-9d67-7374c04c177d/zotezibozabizuviweleb.pdf
- https://uploads.strikinglycdn.com/files/673602b0-4fb4-48a7-8048-d2f954c6cd64/3256013906.pdf
- https://uploads.strikinglycdn.com/files/74264b99-6e1f-41af-8b49-b88c965e65bf/52232553674.pdf
- https://cdn-cms.f-static.net/uploads/4366305/normal_5f8735dc152b1.pdf
Embedded domains
- gettraff.ru
- jiwepurojal.weebly.com
- kupugaxome.weebly.com
- jumuwubugunitus.weebly.com
- lodirunesu.weebly.com
- biwugina.weebly.com
- liwevapazu.weebly.com
- zesopupejilit.weebly.com
- fodezamu.weebly.com
- dimaxafazeza.weebly.com
- site-1040597.mozfiles.com
- site-1038344.mozfiles.com
- site-1041491.mozfiles.com
- site-1038693.mozfiles.com
- site-1042349.mozfiles.com
- zapirawega.weebly.com
- jawasolasazilem.weebly.com
- vuzevarezevarot.weebly.com
- jakedekokobara.weebly.com
- fupexorugukemig.weebly.com
- uploads.strikinglycdn.com
- cdn-cms.f-static.net
- g451.it
- www.w3.org
- purl.org
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report