SUSPICIOUS — 6475799.pdf
SUSPICIOUS — 6475799.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 3 of 50 detection engines flagged it.
Identification
- SHA-256:
b171f494c282d635831e6d877f2b6a60c8cd426f8359bf6e74d2f04a3432cf43 - SHA-1:
ea6ce8a237375712a5d88845387a63c0c43d6dc0 - MD5:
58969ea918aa6c2c291e2ae1b7807d14 - ssdeep:
768:+gGzpDUpPKOxwL/STtHunt/hbZLc/UZBqIT4pOEiMIXaQV16G134l4ZJX:7GFApHmotChasHqIT8OEiV7qG1U4rX - TLSH:
T152327DF304A7ED4CB68B97836DF61099518AC78D6122D79084487BBDD47C2BEBF10960 - Submitted as: 6475799.pdf
- File type: pdf · Size: 46120 bytes
- Verdict: suspicious (44/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): UDS:Trojan.PDF.SBadur.gen
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: https://cctraff.ru/wb?keyword=adaptaci%C3%B3n%20de%20la%20escala%20de%20inteligen, https://site-1040317.mozfiles.com/files/1040317/kumozasoworuxajejilifiba.pdf, https://site-1038499.mozfiles.com/files/1038499/xolexesuxejigegonedo.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/wb?keyword=adaptaci%C3%B3n%20de%20la%20escala%20de%20inteligen
- https://site-1040317.mozfiles.com/files/1040317/kumozasoworuxajejilifiba.pdf
- https://site-1038499.mozfiles.com/files/1038499/xolexesuxejigegonedo.pdf
- https://site-1041492.mozfiles.com/files/1041492/vefanupulukawix.pdf
- https://site-1039768.mozfiles.com/files/1039768/vinenimixedoraxofenav.pdf
- https://site-1040277.mozfiles.com/files/1040277/gufofikosas.pdf
- https://uploads.strikinglycdn.com/files/7b5aa23e-b57d-4436-bcce-63b7fedb341c/6145945617.pdf
- https://uploads.strikinglycdn.com/files/bf5d26c6-819b-4598-a801-a6bb770f05c5/62628495802.pdf
- https://site-1043534.mozfiles.com/files/1043534/13889780147.pdf
- https://site-1040399.mozfiles.com/files/1040399/86091297171.pdf
- https://site-1042927.mozfiles.com/files/1042927/61168961361.pdf
- https://site-1044207.mozfiles.com/files/1044207/12854516393.pdf
- https://site-1039212.mozfiles.com/files/1039212/74092244816.pdf
- https://site-1037094.mozfiles.com/files/1037094/bexutigeliw.pdf
- https://site-1043165.mozfiles.com/files/1043165/xejes.pdf
- https://uploads.strikinglycdn.com/files/4afd624d-5692-48e4-a052-d3eaa11a5a82/17679259976.pdf
- https://uploads.strikinglycdn.com/files/e6bca6db-c0d5-4a0b-bd37-061ed9a19f8a/zivusukus.pdf
- https://uploads.strikinglycdn.com/files/3d868fbf-ed68-4bbd-b0e9-ac22feed4039/sasagewifanaju.pdf
- https://uploads.strikinglycdn.com/files/1b6bd728-2037-46c0-8ce9-bd0317a4d956/92386488315.pdf
- https://uploads.strikinglycdn.com/files/ed3db68b-997e-4a1b-b85b-447557dd2048/35378559952.pdf
- https://site-1048530.mozfiles.com/files/1048530/1930209225.pdf
- https://site-1041784.mozfiles.com/files/1041784/311354830.pdf
- https://site-1038650.mozfiles.com/files/1038650/44154291009.pdf
- https://site-1036867.mozfiles.com/files/1036867/68253720573.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
Embedded domains
- cctraff.ru
- site-1040317.mozfiles.com
- site-1038499.mozfiles.com
- site-1041492.mozfiles.com
- site-1039768.mozfiles.com
- site-1040277.mozfiles.com
- uploads.strikinglycdn.com
- site-1043534.mozfiles.com
- site-1040399.mozfiles.com
- site-1042927.mozfiles.com
- site-1044207.mozfiles.com
- site-1039212.mozfiles.com
- site-1037094.mozfiles.com
- site-1043165.mozfiles.com
- site-1048530.mozfiles.com
- site-1041784.mozfiles.com
- site-1038650.mozfiles.com
- site-1036867.mozfiles.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report