SUSPICIOUS — vinayaka_missions_university_certificate.pdf
SUSPICIOUS — vinayaka_missions_university_certificate.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 3 of 53 detection engines flagged it.
Identification
- SHA-256:
b19460e922497e7e6221a3c4edfabe707ff745f04b56163b3ec9d6c9698841b1 - SHA-1:
3522f6240b1ba396dfbf3a01cb2cfbed41f4127e - MD5:
f87c5b7e84276eb5b22547ffaafe9722 - ssdeep:
1536:sGFSpVmjnAU9LP/Fd3U95Ry6frG6NpkA0IQvlkK:JFSpVmjnz5nj3Udyk66rkA0zlp - TLSH:
T107338DF354A7ED8C798BAB43ADA715996185C389B226D750088C732EC87C1BEBF50520 - Submitted as: vinayaka_missions_university_certificate.pdf
- File type: pdf · Size: 49281 bytes
- Verdict: suspicious (44/100)
Detections (3 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: https://ggtraff.ru/strik?keyword=vinayaka+missions+university+certificate, https://wekubuzebebam.weebly.com/uploads/1/3/0/7/130739705/gatekinoxowasas.pdf, https://doxeduzawixufak.weebly.com/uploads/1/3/4/3/134383044/ronone-wenemike-vuruwew.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://ggtraff.ru/strik?keyword=vinayaka+missions+university+certificate
- https://s3.amazonaws.com/fasanag/1663838111.pdf
- https://s3.amazonaws.com/leguvefu/ditibagatozevaf.pdf
- https://s3.amazonaws.com/subud/character_traits_worksheet_2nd_grade.pdf
- https://s3.amazonaws.com/ligole/subudasivutolob.pdf
- https://s3.amazonaws.com/subud/bekufem.pdf
- https://s3.amazonaws.com/gadumagabusodel/kisaxejeb.pdf
- https://wekubuzebebam.weebly.com/uploads/1/3/0/7/130739705/gatekinoxowasas.pdf
- https://doxeduzawixufak.weebly.com/uploads/1/3/4/3/134383044/ronone-wenemike-vuruwew.pdf
- https://uploads.strikinglycdn.com/files/72db2f17-a2f3-4f90-b1ef-adff9e7e9e4c/fodexigon.pdf
- https://uploads.strikinglycdn.com/files/45600e2b-f95a-4606-b94f-889e0833743d/high_performance_habits_espaol.pdf
- https://uploads.strikinglycdn.com/files/35449630-5cb5-40f5-8940-70fbba7d3578/57597736900.pdf
- https://uploads.strikinglycdn.com/files/9af204bf-dce9-4a1b-a6d6-c504bd763149/gizoporidofo.pdf
- https://uploads.strikinglycdn.com/files/5ec12baa-55a1-43ec-a259-6584a5c942b3/juxetitoteporu.pdf
- https://cdn.shopify.com/s/files/1/0501/6902/0578/files/72205672473.pdf
- https://cdn.shopify.com/s/files/1/0431/1348/0343/files/82891406064.pdf
- https://cdn.shopify.com/s/files/1/0482/8161/6546/files/49867842985.pdf
- https://cdn.shopify.com/s/files/1/0434/4548/5725/files/zisapojuzamewe.pdf
- https://cdn.shopify.com/s/files/1/0432/6231/2616/files/how_to_draw_a_dirt_bike_step_by_step_easy.pdf
- https://s3.amazonaws.com/subud/estadistica_descriptiva_probabilidad_e_inferencia.pdf
- https://s3.amazonaws.com/gumagabu/multiplication_worksheets_7th_grade.pdf
- https://s3.amazonaws.com/mubemutolewe/ramavoruzadogejasaw.pdf
- https://s3.amazonaws.com/lupuvogotog/78957325444.pdf
- https://s3.amazonaws.com/fuwenoxuzasila/luxuroroxuvogafixa.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
Embedded domains
- ggtraff.ru
- s3.amazonaws.com
- wekubuzebebam.weebly.com
- doxeduzawixufak.weebly.com
- uploads.strikinglycdn.com
- cdn.shopify.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report