MALICIOUS — 81708363551.pdf
MALICIOUS — 81708363551.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 4 of 53 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
bc9a457b808e19080c5977558175ece398a91994d8f63e02d8310548810ed8b5 - SHA-1:
7e9a8e2bcdb54104ec4ee438558880d6991cb74e - MD5:
91d8ff60a02ae4804e833ec4dca53507 - ssdeep:
768:QgGzpDJpODGxxVuiolFJHLJhBN5yNqe4h8YmFMAxNJh7/czGv4/nxhl6Qxq:9GFtpjLzxNJh70zGv4f/l6Qxq - TLSH:
T198327EF71097ED4D7A8B5F17ADBB05A9A48EC788602787D0158C272CD4BCAED2F00661 - Submitted as: 81708363551.pdf
- File type: pdf · Size: 45599 bytes
- Verdict: malicious (75/100)
Detections (4 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: flagged
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://cdn-cms.f-static.net/uploads/4365586/normal_5f8700afea0cd.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://cctraff.ru/strik?keyword=macroeconomics+clep+study+guide+free, https://cdn-cms.f-static.net/uploads/4374376/normal_5f898306257bb.pdf, https://cdn-cms.f-static.net/uploads/4372960/normal_5f8aef88ebe90.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://cctraff.ru/strik?keyword=macroeconomics+clep+study+guide+free
- https://cdn-cms.f-static.net/uploads/4374376/normal_5f898306257bb.pdf
- https://cdn-cms.f-static.net/uploads/4372960/normal_5f8aef88ebe90.pdf
- https://cdn-cms.f-static.net/uploads/4367938/normal_5f88da79562dc.pdf
- https://cdn-cms.f-static.net/uploads/4365586/normal_5f8700afea0cd.pdf
- https://cdn-cms.f-static.net/uploads/4369909/normal_5f88c219b2d80.pdf
- https://cdn-cms.f-static.net/uploads/4369495/normal_5f88c7184e444.pdf
- https://cdn-cms.f-static.net/uploads/4366032/normal_5f8890107c8c6.pdf
- https://cdn-cms.f-static.net/uploads/4368251/normal_5f8911599e349.pdf
- https://cdn-cms.f-static.net/uploads/4366018/normal_5f875625f0544.pdf
- https://cdn-cms.f-static.net/uploads/4379613/normal_5f8bcfa2ec1bc.pdf
- https://cdn-cms.f-static.net/uploads/4371790/normal_5f8a86a2c8deb.pdf
- https://cdn-cms.f-static.net/uploads/4379046/normal_5f8b65e16327b.pdf
- https://uploads.strikinglycdn.com/files/23a37a5d-412f-41d4-bef6-24bf51e50360/89365317147.pdf
- https://uploads.strikinglycdn.com/files/74ff86b6-80cb-4d38-a03e-cd4722084bac/kifukimatonixo.pdf
- https://uploads.strikinglycdn.com/files/7eac4367-43d2-481a-810c-6b63f37b094a/33251743649.pdf
- https://uploads.strikinglycdn.com/files/727050a5-704b-4918-81ce-faa98385e5c5/4215281809.pdf
- https://cdn.shopify.com/s/files/1/0494/4956/6367/files/wyatt_elementary_school.pdf
- https://cdn.shopify.com/s/files/1/0481/8881/7562/files/rijenamazagipagidixomogi.pdf
- https://cdn.shopify.com/s/files/1/0266/9484/4587/files/luwinuduposaso.pdf
- https://cdn.shopify.com/s/files/1/0501/0613/8787/files/dupray_steam_cleaner_instructions.pdf
- https://cdn-cms.f-static.net/uploads/4369311/normal_5f88b5d2759ac.pdf
- https://cdn-cms.f-static.net/uploads/4367007/normal_5f87bbcb938ee.pdf
- https://cdn-cms.f-static.net/uploads/4368485/normal_5f89285489ba3.pdf
- https://cdn-cms.f-static.net/uploads/4366958/normal_5f8a70a5180c0.pdf
Embedded domains
- cctraff.ru
- cdn-cms.f-static.net
- uploads.strikinglycdn.com
- cdn.shopify.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report