MALICIOUS — xipiwe_tivalu_nutojaj.pdf
MALICIOUS — xipiwe_tivalu_nutojaj.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
b16736aadfd534a017aecc0551b49c8860d558ee21e492849a6af348869c7035 - SHA-1:
79634b4a29cd562177d2a2f308b3306db09547ab - MD5:
3bafe5e50852d0b764febf5815be2eb2 - ssdeep:
768:VgGzpDYpwK97hK16XvcYQecFg4eEp4/iJ9N5xOX5q7c08BeXYNB2OYFtJ+mlbKY/:GGFMpv+PpnJvOX5q40C+YNB2OctUNYl5 - TLSH:
T1FB328FF314A7DD8D7AC79B07ADAA24595049C78C6237AB60448C7B2CD5BC6BD7E40820 - Submitted as: xipiwe_tivalu_nutojaj.pdf
- File type: pdf · Size: 46476 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://vuxozajuje.weebly.com/uploads/1/3/1/3/131379873/1867598.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://gettraff.ru/wb?keyword=one%20day%20at%20a%20time%20sweet%20jesus%20mp3, https://vuxozajuje.weebly.com/uploads/1/3/1/3/131379873/1867598.pdf, https://zusaneji.weebly.com/uploads/1/3/0/8/130813769/661864.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/wb?keyword=one%20day%20at%20a%20time%20sweet%20jesus%20mp3
- https://vuxozajuje.weebly.com/uploads/1/3/1/3/131379873/1867598.pdf
- https://zusaneji.weebly.com/uploads/1/3/0/8/130813769/661864.pdf
- https://biwugina.weebly.com/uploads/1/3/1/1/131163984/gubajosupejefuj.pdf
- https://rijizego.weebly.com/uploads/1/3/0/7/130776487/zabezone.pdf
- https://uploads.strikinglycdn.com/files/a9566ff0-c195-4e06-8abd-f2b61a186bea/33138745069.pdf
- https://uploads.strikinglycdn.com/files/96503bc5-8c67-4571-ae7e-41cc125c05f3/92378919215.pdf
- https://uploads.strikinglycdn.com/files/dc7c7f25-22d2-4bfa-a3d9-f576498b7c0b/jagilagelewukevijoma.pdf
- https://uploads.strikinglycdn.com/files/fffc6682-ec0c-4b3d-98de-b39166e83e35/vopixulovererabotobibatu.pdf
- https://uploads.strikinglycdn.com/files/0a8ff706-32ff-4c30-91ce-43c3d02cbdca/rafir.pdf
- https://cdn-cms.f-static.net/uploads/4366381/normal_5f873653d74a5.pdf
- https://cdn-cms.f-static.net/uploads/4365653/normal_5f88916dab94c.pdf
- https://cdn-cms.f-static.net/uploads/4366622/normal_5f8763c919e6d.pdf
- https://cdn-cms.f-static.net/uploads/4369307/normal_5f891210abbc9.pdf
- https://cdn.shopify.com/s/files/1/0484/4647/2342/files/73960434158.pdf
- https://cdn.shopify.com/s/files/1/0436/4913/8846/files/govifiranutarofe.pdf
- https://cdn.shopify.com/s/files/1/0438/1225/7952/files/ncert_exemplar_maths_class_9.pdf
- https://cdn.shopify.com/s/files/1/0430/9060/8285/files/functionalist_perspective_on_social_stratification.pdf
- https://guwomenod.weebly.com/uploads/1/3/0/8/130873843/roruj-fegedevovelere-zexomojikazi-rewubujelem.pdf
- https://wavuvavezexa.weebly.com/uploads/1/3/0/7/130775629/02d0dc.pdf
- https://vuxozajuje.weebly.com/uploads/1/3/1/3/131379873/3257372.pdf
- https://bewupoterefi.weebly.com/uploads/1/3/1/3/131380107/3136f840917a1.pdf
- https://lajojixuvoporor.weebly.com/uploads/1/3/0/7/130738555/fodiwimudaxomof.pdf
- https://cdn.shopify.com/s/files/1/0496/5158/1079/files/hack_tool_game_android_apk.pdf
- https://cdn.shopify.com/s/files/1/0498/4999/1330/files/kugogoperamal.pdf
Embedded domains
- gettraff.ru
- vuxozajuje.weebly.com
- zusaneji.weebly.com
- biwugina.weebly.com
- rijizego.weebly.com
- uploads.strikinglycdn.com
- cdn-cms.f-static.net
- cdn.shopify.com
- guwomenod.weebly.com
- wavuvavezexa.weebly.com
- bewupoterefi.weebly.com
- lajojixuvoporor.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report