SUSPICIOUS — zenudi_muvagubanetive.pdf
SUSPICIOUS — zenudi_muvagubanetive.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (58/100). 2 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
9e6ff7e9de395078697943e83ba651bb5133f25e47f9ae51221c3f63b0226732 - SHA-1:
61e031b2f96177c109b03f370e017eeddc48d40d - MD5:
5b230851d6c0d27a2bbefa2772b0b516 - ssdeep:
768:IgGzpD3pw2ejJJ5Di1FGOY9rmYK4neTx49mup/XPFPwUYSwQksIhIbLjAxb:FGFjpsc13/MV/XPFoxSggjAxb - TLSH:
T14C328DF710A3ED8D399F9B83ADAB129A644AD74C6126D79004886B2CD4BC5FD7F00A11 - Submitted as: zenudi_muvagubanetive.pdf
- File type: pdf · Size: 45618 bytes
- Verdict: suspicious (58/100)
Detections (2 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The suspicious score of 58/100 is the fusion of 4 weighted signals:
- Embedded link rated suspicious by URL analysis: https://rudofodirofebas.weebly.com/uploads/1/3/0/7/130739781/167570db00348.pdf - network signal, weight 0.40, confidence 0.60
- Embedded network infrastructure: https://ggtraff.ru/wb?keyword=ecuaciones%20diferenciales%20zill%208%20edic, https://cdn.shopify.com/s/files/1/0434/2461/2509/files/icass_guidelines_2020_ncv.pdf, https://cdn.shopify.com/s/files/1/0430/7877/9047/files/infamous_1_ps3_trophy_guide.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://ggtraff.ru/wb?keyword=ecuaciones%20diferenciales%20zill%208%20edic
- https://cdn.shopify.com/s/files/1/0434/2461/2509/files/icass_guidelines_2020_ncv.pdf
- https://cdn.shopify.com/s/files/1/0430/7877/9047/files/infamous_1_ps3_trophy_guide.pdf
- https://cdn.shopify.com/s/files/1/0467/9955/2663/files/still_life_symbolism_list.pdf
- https://cdn.shopify.com/s/files/1/0429/2611/2927/files/lokisowekomonaw.pdf
- https://derodaju.weebly.com/uploads/1/3/1/6/131606282/fizarogo.pdf
- https://dimaxafazeza.weebly.com/uploads/1/3/1/4/131453031/kezedivalo-bolumukejufufik.pdf
- https://nizesuvijeva.weebly.com/uploads/1/3/1/6/131607023/darek.pdf
- https://genamimiwovem.weebly.com/uploads/1/3/1/6/131636881/tuzozajeruru.pdf
- https://rudofodirofebas.weebly.com/uploads/1/3/0/7/130739781/167570db00348.pdf
- https://xawuwotogot.weebly.com/uploads/1/3/2/6/132695388/nibirixuvigezux_wuzigu.pdf
- https://disaxugotusineg.weebly.com/uploads/1/3/1/8/131871710/sevux.pdf
- https://dimaxafazeza.weebly.com/uploads/1/3/1/4/131453031/caa64.pdf
- https://pebiname.weebly.com/uploads/1/3/1/4/131453048/zepeferivuzejadanute.pdf
- https://nulixedupalaz.weebly.com/uploads/1/3/0/7/130739510/mijasalejim.pdf
- https://bilewazivabo.weebly.com/uploads/1/3/2/8/132816117/bowigisutogufawolin.pdf
- https://xumogimunosu.weebly.com/uploads/1/3/1/6/131607683/5213414.pdf
- https://netaluzubik.weebly.com/uploads/1/3/0/8/130813777/mekikagu_jotixozi_fusofebagaja_zozewup.pdf
- https://cdn-cms.f-static.net/uploads/4365659/normal_5f871f94183d6.pdf
- https://cdn-cms.f-static.net/uploads/4375890/normal_5f8c75d7eec5e.pdf
- https://cdn-cms.f-static.net/uploads/4366018/normal_5f87071904c2b.pdf
- https://cdn-cms.f-static.net/uploads/4367294/normal_5f878a2399f61.pdf
- https://cdn-cms.f-static.net/uploads/4365626/normal_5f87476317759.pdf
- https://cdn.shopify.com/s/files/1/0483/4669/3781/files/kindle_app_tablet_android.pdf
- https://cdn.shopify.com/s/files/1/0266/8534/1896/files/88398457363.pdf
Embedded domains
- ggtraff.ru
- cdn.shopify.com
- derodaju.weebly.com
- dimaxafazeza.weebly.com
- nizesuvijeva.weebly.com
- genamimiwovem.weebly.com
- rudofodirofebas.weebly.com
- xawuwotogot.weebly.com
- disaxugotusineg.weebly.com
- pebiname.weebly.com
- nulixedupalaz.weebly.com
- bilewazivabo.weebly.com
- xumogimunosu.weebly.com
- netaluzubik.weebly.com
- cdn-cms.f-static.net
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report