MALICIOUS — a7bbc8ac18f498ab1d2b61f2075eb68ea8e470beff4b6d096d0663aefe757cef
MALICIOUS — a7bbc8ac18f498ab1d2b61f2075eb68ea8e470beff4b6d096d0663aefe757cef is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (96/100). 4 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
a7bbc8ac18f498ab1d2b61f2075eb68ea8e470beff4b6d096d0663aefe757cef - SHA-1:
42d0916946dc905f5f4c4a9660573f3f242a6b67 - MD5:
717da9fe5a533bc5c5ada9729a26ec12 - ssdeep:
1536:qca2nLtQ7ZJfvmX9QoM3tz12u8R8naCr6HGplFwaIXB1HGQNaf/:qz2ZQ7ZoioM391168nlWHGplfIXHY - TLSH:
T19636E1D269EBDC0CB95BDB13EC7734AA178ED20E81ABA311148C672BD1ED02D7425E50 - Submitted as: a7bbc8ac18f498ab1d2b61f2075eb68ea8e470beff4b6d096d0663aefe757cef
- File type: pdf · Size: 66686 bytes
- Verdict: malicious (96/100)
Detections (4 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- ClamAV (daily): Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0
- Trellix Stinger (McAfee): PDF/Phish-FAB!717DA9FE5A53
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
MITRE ATT&CK
Why this verdict
The malicious score of 96/100 is the fusion of 5 weighted signals:
- ClamAV (daily) flagged Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0 (rule
Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0) - engine signal, weight 0.90, confidence 0.95 - Embedded link rated malicious by URL analysis: https://uploads.strikinglycdn.com/files/c821cfb2-5280-452a-9336-14a055e64a67/72764830861.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://midufefew.ru/award?keyword=isabel+allende+livro+paula+pdf, https://uploads.strikinglycdn.com/files/5933f891-7f87-413a-9aec-6f880e482ecf/rowe_ami_jukebox_amplifier_repair.pdf, https://uploads.strikinglycdn.com/files/c821cfb2-5280-452a-9336-14a055e64a67/72764830861.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://midufefew.ru/award?keyword=isabel+allende+livro+paula+pdf
- https://uploads.strikinglycdn.com/files/5933f891-7f87-413a-9aec-6f880e482ecf/rowe_ami_jukebox_amplifier_repair.pdf
- https://s3.amazonaws.com/lorifawuvawot/xuvurukafipavudizaz.pdf
- https://uploads.strikinglycdn.com/files/c821cfb2-5280-452a-9336-14a055e64a67/72764830861.pdf
- https://zabagazepag.weebly.com/uploads/1/3/4/4/134498959/1280513.pdf
- https://uploads.strikinglycdn.com/files/563053b2-8625-4334-9e66-0d892a88bde0/casio_protrek_prw_3000_band.pdf
- https://s3.amazonaws.com/mulerux/vidmate_for_pc_windows_7_softonic.pdf
- https://uploads.strikinglycdn.com/files/0e0ab33b-f39c-4e9f-a6e1-2ec6a4b1869b/41037773690.pdf
- https://jomezafivawig.weebly.com/uploads/1/3/1/8/131856232/77713f8c381.pdf
- https://besuxape.weebly.com/uploads/1/3/4/3/134374749/3999554.pdf
- https://s3.amazonaws.com/fakuguvil/penubepoterogafu.pdf
- https://nebuxegakox.weebly.com/uploads/1/3/4/4/134404726/vogabuserupira.pdf
- http://geworikirabud.epizy.com/the_bronze_bow_audiobook_chapter_3.pdf
- http://jarexuvi.epizy.com/bottleneck_layer_performance.pdf
- https://uploads.strikinglycdn.com/files/8573d37c-1f2c-4a61-81c4-19dd736c8a95/can_us_citizens_work_in_colombia.pdf
- https://uploads.strikinglycdn.com/files/3219b52b-f521-4873-a2ac-bee1055d198f/26024736269.pdf
- http://mifetuvoge.22web.org/falesubado.pdf
- https://mogopefisumiba.weebly.com/uploads/1/3/5/2/135295831/8454147.pdf
- https://uploads.strikinglycdn.com/files/155427d0-9362-4ce9-b431-39d72990fe88/lexus_rx_350_f_sport_for_sale_nj.pdf
- http://pujigiberaxu.epizy.com/craftsman_lt2000_mower_deck_parts_list.pdf
Embedded domains
- midufefew.ru
- uploads.strikinglycdn.com
- s3.amazonaws.com
- zabagazepag.weebly.com
- jomezafivawig.weebly.com
- besuxape.weebly.com
- nebuxegakox.weebly.com
- geworikirabud.epizy.com
- jarexuvi.epizy.com
- mifetuvoge.22web.org
- mogopefisumiba.weebly.com
- pujigiberaxu.epizy.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report