MALICIOUS — 8c0e65_0ec565fdbf51419dbab750d636030793.pdf

MALICIOUS — 8c0e65_0ec565fdbf51419dbab750d636030793.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (78/100). 2 of 53 detection engines flagged it.

Identification

• SHA-256: c8b5a29b36fb2877ee6619adbaf2c3ccaacc929ba4df37c5b8119843ef3bc5bc
• SHA-1: 550e53c836a9384c45ec6e2f2235aae260c3d1bb
• MD5: 7f12e6b619a7613aaad76e1697857295
• ssdeep: 768:3VgGzpDkKlqccYGhOLzw/NvEFNNCVFYjORFfu6PMDO1nW7sECrJ3iIIk9l39L4:2GFAh0Ls/NvEFNNCV7kDKnWgECrhiIIx
• TLSH: T122329DF340A7ED4C39879B4369E7119C9049D7887132A6B049D8BB6CC4BC37DAF50AA1
• Submitted as: 8c0e65_0ec565fdbf51419dbab750d636030793.pdf
• File type: pdf · Size: 44921 bytes
• Verdict: malicious (78/100)

Detections (2 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Emsisoft (Emergency Kit): PDF.Spam.Heur.1

Why this verdict

The malicious score of 78/100 is the fusion of 5 weighted signals:

• Emsisoft (Emergency Kit) flagged PDF.Spam.Heur.1 (rule PDF.Spam.Heur.1) - engine signal, weight 0.55, confidence 0.85
• MalwareAnalyser heuristics (entropy/packer) flagged high-entropy-blob (rule high-entropy-blob) - engine signal, weight 0.35, confidence 0.70
• Embedded network infrastructure: https://ttraff.ru/wix?keyword=medidas+dela+cancha+de+basquet+minimas+y+maximas, https://cdn.shopify.com/s/files/1/0438/3742/3776/files/clasificacion_lauren_cancer_gastrico.pdf, https://cdn.shopify.com/s/files/1/0431/5827/4205/files/ranaboverekog.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis

No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.

Embedded URLs

• https://ttraff.ru/wix?keyword=medidas+dela+cancha+de+basquet+minimas+y+maximas
• https://cdn.shopify.com/s/files/1/0438/3742/3776/files/clasificacion_lauren_cancer_gastrico.pdf
• https://cdn.shopify.com/s/files/1/0431/5827/4205/files/ranaboverekog.pdf
• https://cdn.shopify.com/s/files/1/0432/4874/6651/files/dinesh_biology_book_class_11.pdf
• https://cdn.shopify.com/s/files/1/0431/8930/5506/files/wow_classic_mage_aoe_grinding_guide.pdf
• https://ca799fa1-e980-4496-9d56-e77d08323c81.filesusr.com/ugd/8f6098_d30646e96d674bb58cd82bbccee9f003.pdf?index=true
• https://c1ac154f-641a-4c4c-a584-f0b5a963432b.filesusr.com/ugd/d90490_89a106f01e684503a541c4d46bed8fbf.pdf?index=true
• https://0d9a6e39-6047-46a7-9d76-13e11a195240.filesusr.com/ugd/3bcfef_2f9bb1a8bbe64248a1f53e0707044788.pdf?index=true
• https://6f97f05b-fd06-4fe9-b323-e2f070dc99c6.filesusr.com/ugd/7be1cd_931118c0320c471c81ce65c8f018f8e9.pdf?index=true
• https://9f512b8f-4258-4acd-a645-fbb4fcbcee40.filesusr.com/ugd/735189_868c1efd07b949aebe02ed9052409637.pdf?index=true
• https://ee5b1ebf-07b4-44de-be32-8f9a51d2a99b.filesusr.com/ugd/dcf9ad_020fea1908434da39d17e27b20e2b080.pdf?index=true
• https://cdn.shopify.com/s/files/1/0430/2936/4889/files/dowipatejaletevawutofim.pdf
• https://cdn.shopify.com/s/files/1/0434/0128/1701/files/becker_cpa_study_material_free.pdf
• https://cdn.shopify.com/s/files/1/0428/1411/1903/files/82356225406.pdf
• https://cdn.shopify.com/s/files/1/0435/8992/7067/files/engineering_vibration_4th_edition_solution_manual.pdf
• https://cdn.shopify.com/s/files/1/0430/7792/7063/files/zukunakavolamazaniguxanas.pdf
• http://www.w3.org/1999/02/22-rdf-syntax-ns#
• http://purl.org/dc/elements/1.1/
• http://ns.adobe.com/pdf/1.3/
• http://ns.adobe.com/xap/1.0/
• http://ns.adobe.com/xap/1.0/mm/
• http://ns.adobe.com/xap/1.0/rights/

Embedded domains

• ttraff.ru
• cdn.shopify.com
• ca799fa1-e980-4496-9d56-e77d08323c81.filesusr.com
• c1ac154f-641a-4c4c-a584-f0b5a963432b.filesusr.com
• 0d9a6e39-6047-46a7-9d76-13e11a195240.filesusr.com
• 6f97f05b-fd06-4fe9-b323-e2f070dc99c6.filesusr.com
• 9f512b8f-4258-4acd-a645-fbb4fcbcee40.filesusr.com
• ee5b1ebf-07b4-44de-be32-8f9a51d2a99b.filesusr.com
• www.w3.org
• purl.org
• ns.adobe.com

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report