MALICIOUS — 8a56f49.pdf
MALICIOUS — 8a56f49.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
a320575f6e158342b5741c5ec859e7315c4b574ecdbc933196068146264cb173 - SHA-1:
51e9d4a0a6b94aeabb5889f0e04df459657cadc9 - MD5:
fcdd5ff20cd102538f6d1052e0b4fc55 - ssdeep:
1536:aGF1p1sD8v4PnQ19+FSBLkWBYepaWv0d+OBMHbPr4d:DF1pyD8uopkSYsmdR5 - TLSH:
T12E34AFF3509BDD4C7A9B9B13ADB61519A44AC788B133DB9004DCAB3DC06C6BD7E10921 - Submitted as: 8a56f49.pdf
- File type: pdf · Size: 54668 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://dutitujazekap.weebly.com/uploads/1/3/0/8/130814390/xizaxamuxive.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/wb?keyword=new%20super%20mario%20bros%202%20ds%20rom%20hack%20d, https://dutitujazekap.weebly.com/uploads/1/3/0/8/130814390/xizaxamuxive.pdf, https://xebikazogede.weebly.com/uploads/1/3/2/7/132740990/271339.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=new%20super%20mario%20bros%202%20ds%20rom%20hack%20d
- https://dutitujazekap.weebly.com/uploads/1/3/0/8/130814390/xizaxamuxive.pdf
- https://xebikazogede.weebly.com/uploads/1/3/2/7/132740990/271339.pdf
- https://jatorogerujew.weebly.com/uploads/1/3/2/7/132710569/jixidused.pdf
- https://walijogopabo.weebly.com/uploads/1/3/0/7/130776167/5300225.pdf
- https://cdn-cms.f-static.net/uploads/4368243/normal_5f88294b4b38a.pdf
- https://cdn-cms.f-static.net/uploads/4366398/normal_5f88035ff3f32.pdf
- https://cdn-cms.f-static.net/uploads/4365562/normal_5f87be8684938.pdf
- https://uploads.strikinglycdn.com/files/c0cb8879-ca91-42a3-a79e-781cae9847a4/jotumo.pdf
- https://uploads.strikinglycdn.com/files/4e488cc2-9e9d-491d-8efc-2d30081e6616/71129561787.pdf
- https://cdn-cms.f-static.net/uploads/4367275/normal_5f874b3a20c6e.pdf
- https://cdn-cms.f-static.net/uploads/4366306/normal_5f874b644aed8.pdf
- https://cdn-cms.f-static.net/uploads/4367919/normal_5f87e464b12a4.pdf
- https://cdn-cms.f-static.net/uploads/4366346/normal_5f87b93753356.pdf
- https://cdn-cms.f-static.net/uploads/4366339/normal_5f874a5831a84.pdf
- https://cdn-cms.f-static.net/uploads/4365621/normal_5f86f9d237dc9.pdf
- https://cdn-cms.f-static.net/uploads/4366381/normal_5f87689dc3e5b.pdf
- https://cdn-cms.f-static.net/uploads/4366359/normal_5f8802bf54ab1.pdf
- https://cdn-cms.f-static.net/uploads/4367275/normal_5f875c06bc2da.pdf
- https://cdn-cms.f-static.net/uploads/4368469/normal_5f8784aa51182.pdf
- https://site-1043975.mozfiles.com/files/1043975/53361421253.pdf
- https://site-1036629.mozfiles.com/files/1036629/7061412987.pdf
- https://site-1039998.mozfiles.com/files/1039998/55191064654.pdf
- https://site-1040881.mozfiles.com/files/1040881/91871054785.pdf
- https://site-1039877.mozfiles.com/files/1039877/dulolij.pdf
Embedded domains
- cctraff.ru
- dutitujazekap.weebly.com
- xebikazogede.weebly.com
- jatorogerujew.weebly.com
- walijogopabo.weebly.com
- cdn-cms.f-static.net
- uploads.strikinglycdn.com
- site-1043975.mozfiles.com
- site-1036629.mozfiles.com
- site-1039998.mozfiles.com
- site-1040881.mozfiles.com
- site-1039877.mozfiles.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report