MALICIOUS — causas_del_fin_de_la_guerra_fria.pdf
MALICIOUS — causas_del_fin_de_la_guerra_fria.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 3 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
b7517cc02c29fdf3968d7dfd49e7953e665173fa2748b75b774174ed39db7267 - SHA-1:
857d3b2a2d28b0b6a1b1b41439b219d2c8b48507 - MD5:
be1e87d829d2f247ae4f5607a418c2ff - ssdeep:
768:FgGzpDCpgmotLhbs9cW6XzXSANOjmQYs4nxB8wqcAESxUhXKbi/haoBohrlm:WGFep8/sjmFPBwESUWiJa9rlm - TLSH:
T190338DF35093DE8D7E8FAB83ADAB1599548A938D61379B90188C721CD07C1ED2F10B61 - Submitted as: causas_del_fin_de_la_guerra_fria.pdf
- File type: pdf · Size: 48192 bytes
- Verdict: malicious (75/100)
Detections (3 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://cdn-cms.f-static.net/uploads/4366042/normal_5f8717b4594ba.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/strik?keyword=causas+del+fin+de+la+guerra+fria, https://uploads.strikinglycdn.com/files/85b58f18-51cd-4d8b-9b07-d22fb3a89b64/tiwalebenovida.pdf, https://uploads.strikinglycdn.com/files/6dbd19a3-8f2e-49b0-8a6e-72cb6e7f44d0/vonemotoxexo.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/strik?keyword=causas+del+fin+de+la+guerra+fria
- https://uploads.strikinglycdn.com/files/85b58f18-51cd-4d8b-9b07-d22fb3a89b64/tiwalebenovida.pdf
- https://uploads.strikinglycdn.com/files/6dbd19a3-8f2e-49b0-8a6e-72cb6e7f44d0/vonemotoxexo.pdf
- https://uploads.strikinglycdn.com/files/bdb386c2-68d3-4210-afc7-e21e4ecdd579/vejenumezisodejef.pdf
- https://uploads.strikinglycdn.com/files/d6dac868-681d-403a-8370-179f356d7d16/57615581323.pdf
- https://uploads.strikinglycdn.com/files/6a539328-907b-4bd2-86f6-362df5edfa43/3944478892.pdf
- https://cdn-cms.f-static.net/uploads/4366982/normal_5f874528e21da.pdf
- https://cdn-cms.f-static.net/uploads/4366311/normal_5f8892de26ca2.pdf
- https://cdn-cms.f-static.net/uploads/4366042/normal_5f8717b4594ba.pdf
- https://cdn.shopify.com/s/files/1/0500/5144/9000/files/assurant_employee_benefits_vision.pdf
- https://cdn.shopify.com/s/files/1/0483/1487/6059/files/64176636928.pdf
- https://cdn.shopify.com/s/files/1/0488/2065/0149/files/jackie_evancho_age_18.pdf
- https://cdn.shopify.com/s/files/1/0501/4270/7905/files/anaerobic_treatment_of_wastewater.pdf
- https://cdn.shopify.com/s/files/1/0481/6152/1815/files/living_environment_regents_2019_answers_key.pdf
- https://cdn.shopify.com/s/files/1/0437/8581/4173/files/cho_pat_strap_patella_tendonitis.pdf
- https://cdn.shopify.com/s/files/1/0433/9816/8743/files/download_onmovies_android_apk.pdf
- https://cdn.shopify.com/s/files/1/0435/2665/2055/files/ruzomolojuzaminojonavej.pdf
- https://cdn.shopify.com/s/files/1/0483/3735/4903/files/survival_squad_download_apk_obb.pdf
- https://uploads.strikinglycdn.com/files/03f51239-5408-4119-8076-574055dbf1be/shell_scripting.pdf
- https://uploads.strikinglycdn.com/files/8a1e49f8-3578-4db0-9458-e8ca9e9eddeb/tojunevos.pdf
- https://uploads.strikinglycdn.com/files/5f2d872b-0682-4fe4-892a-f489667ff96a/fewameligupebupo.pdf
- https://uploads.strikinglycdn.com/files/d1a0037c-0aa0-4e1a-b9b3-c7cd4ed948c3/xezoluvunaberud.pdf
- https://uploads.strikinglycdn.com/files/9f39f69a-965a-488e-be2f-0facf7362749/bojinusi.pdf
- https://uploads.strikinglycdn.com/files/14d2ea34-5eae-42b0-9230-1ae3f4fbb412/munesuxutovesazeximovuje.pdf
- https://uploads.strikinglycdn.com/files/665516a8-9e43-4470-b0ca-0a6f1456466f/furuf.pdf
Embedded domains
- cctraff.ru
- uploads.strikinglycdn.com
- cdn-cms.f-static.net
- cdn.shopify.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report