SUSPICIOUS — 9203454.pdf
SUSPICIOUS — 9203454.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (58/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
c9d836896a1a17d98bd14de9156c312a30fd658b65eb17102149a1ab43f4200e - SHA-1:
882c5cdc744bbc6063b2984927b1f4ba08ab92c2 - MD5:
998bfb7df12e958e3313aed001695cce - ssdeep:
1536:6EGFLp+Xcd25XEX/VYmee4m5q5iMGbXKoFeOmX:6RFLp+M9NYmee4m5q0M9Ce9 - TLSH:
T1D0339DF35097FE4C7A8B9F035DAA245A9089D288A033E76490982B7DD07C6FD7F40960 - Submitted as: 9203454.pdf
- File type: pdf · Size: 51354 bytes
- Verdict: suspicious (58/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The suspicious score of 58/100 is the fusion of 4 weighted signals:
- Embedded link rated suspicious by URL analysis: https://uploads.strikinglycdn.com/files/8c1cdef2-b028-41e4-a8d4-c848b827a918/99513524202.pdf - network signal, weight 0.40, confidence 0.60
- Embedded network infrastructure: https://gettraff.ru/wb?keyword=bolens%20riding%20lawn%20mower%20manual, https://uploads.strikinglycdn.com/files/8c1cdef2-b028-41e4-a8d4-c848b827a918/99513524202.pdf, https://uploads.strikinglycdn.com/files/f569846a-c28d-4b7f-a78a-6f439b05bf6b/70951213720.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/wb?keyword=bolens%20riding%20lawn%20mower%20manual
- https://uploads.strikinglycdn.com/files/8c1cdef2-b028-41e4-a8d4-c848b827a918/99513524202.pdf
- https://uploads.strikinglycdn.com/files/f569846a-c28d-4b7f-a78a-6f439b05bf6b/70951213720.pdf
- https://uploads.strikinglycdn.com/files/2887d670-cced-4a4d-bd92-91b31abfc2ba/32635176781.pdf
- https://uploads.strikinglycdn.com/files/302af84c-02fe-4838-8b4e-b21071cd41d5/linepumodipeziwe.pdf
- https://cdn-cms.f-static.net/uploads/4366987/normal_5f8784161f923.pdf
- https://cdn-cms.f-static.net/uploads/4365635/normal_5f874300b1dbb.pdf
- https://site-1042886.mozfiles.com/files/1042886/palakojozipaketororij.pdf
- https://site-1036761.mozfiles.com/files/1036761/mijirarez.pdf
- https://site-1038830.mozfiles.com/files/1038830/hazeldene_family_centre_handbook.pdf
- https://site-1043117.mozfiles.com/files/1043117/voderojuduvuxab.pdf
- https://site-1038910.mozfiles.com/files/1038910/6286243495.pdf
- https://site-1040141.mozfiles.com/files/1040141/jedujodusawosiwino.pdf
- https://site-1039769.mozfiles.com/files/1039769/tuvorivexex.pdf
- https://cdn.shopify.com/s/files/1/0436/8154/6390/files/61331972677.pdf
- https://cdn.shopify.com/s/files/1/0484/4155/7150/files/74799682731.pdf
- https://cdn.shopify.com/s/files/1/0430/8199/0293/files/pipifo.pdf
- https://cdn.shopify.com/s/files/1/0480/5312/5284/files/verdad_o_reto.pdf
- https://cdn.shopify.com/s/files/1/0484/8880/8598/files/avital_5305l_installation_guide.pdf
- https://site-1036696.mozfiles.com/files/1036696/sifisa.pdf
- https://site-1039578.mozfiles.com/files/1039578/kixutiseduvetazifateg.pdf
- https://site-1039733.mozfiles.com/files/1039733/sejozororugerimo.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/pdf/1.3/
Embedded domains
- gettraff.ru
- uploads.strikinglycdn.com
- cdn-cms.f-static.net
- site-1042886.mozfiles.com
- site-1036761.mozfiles.com
- site-1038830.mozfiles.com
- site-1043117.mozfiles.com
- site-1038910.mozfiles.com
- site-1040141.mozfiles.com
- site-1039769.mozfiles.com
- cdn.shopify.com
- site-1036696.mozfiles.com
- site-1039578.mozfiles.com
- site-1039733.mozfiles.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report