SUSPICIOUS — 93826769438.pdf

SUSPICIOUS — 93826769438.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 2 of 53 detection engines flagged it.

Identification

• SHA-256: cc2f57b20674afb42d626b3a4df2dad35021ae658703cc077e42bc09f8fc7d41
• SHA-1: 45cbb46b3d433da27c2fe6e23f499afc4ba0f972
• MD5: 709dc1b0e9ab30015aa337108d49f491
• ssdeep: 1536:CGFzp9dY60QVRPKJm7phyXVdW+K9I+rx76:7FzpHGQPSi4XV29I+rs
• TLSH: T18C33BFF30056DD4C7AC7AB47BCAA141A2195D68C3032EBA0069C776CD5BC3BCAE40D62
• Submitted as: 93826769438.pdf
• File type: pdf · Size: 51544 bytes
• Verdict: suspicious (44/100)

Detections (2 of 53 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• Emsisoft (Emergency Kit): PDF.Spam.Heur.1

Why this verdict

The suspicious score of 44/100 is the fusion of 3 weighted signals:

• Embedded network infrastructure: https://ggtraff.ru/strik?keyword=investigation+discovery+on+fios, https://cdn.shopify.com/s/files/1/0482/2240/4760/files/how_to_calculate_joint_probability_in_excel.pdf, https://cdn.shopify.com/s/files/1/0486/1719/3637/files/53428208858.pdf - static signal, weight 0.35, confidence 0.60
• Document active content: uri-action - static signal, weight 0.30, confidence 0.60
• Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55

Dynamic analysis (windows)

0 behavior events · 0 ATT&CK techniques · 0 dropped files.

Runtime network

• none

Embedded URLs

• https://ggtraff.ru/strik?keyword=investigation+discovery+on+fios
• https://cdn.shopify.com/s/files/1/0482/2240/4760/files/how_to_calculate_joint_probability_in_excel.pdf
• https://cdn.shopify.com/s/files/1/0486/1719/3637/files/53428208858.pdf
• https://cdn.shopify.com/s/files/1/0441/0572/8152/files/zujixezidebunugi.pdf
• https://cdn.shopify.com/s/files/1/0431/5525/9546/files/misuzujexakitafef.pdf
• https://cdn.shopify.com/s/files/1/0496/1527/4147/files/navy_federal_las_vegas.pdf
• https://cdn.shopify.com/s/files/1/0482/0549/6472/files/surah_al_waqiah_download.pdf
• https://cdn.shopify.com/s/files/1/0434/6668/6617/files/white_rodgers_air_conditioning_thermostat_manual.pdf
• https://cdn.shopify.com/s/files/1/0498/4599/3634/files/89423359187.pdf
• https://cdn.shopify.com/s/files/1/0429/4646/1852/files/who_invented_baseball_cards.pdf
• https://cdn.shopify.com/s/files/1/0431/7590/3392/files/zimago.pdf
• https://cdn.shopify.com/s/files/1/0483/4944/6295/files/2008_ford_explorer_sync_manual.pdf
• https://cdn.shopify.com/s/files/1/0482/7342/4548/files/94826692728.pdf
• http://www.w3.org/1999/02/22-rdf-syntax-ns#
• http://purl.org/dc/elements/1.1/
• http://ns.adobe.com/pdf/1.3/
• http://ns.adobe.com/xap/1.0/
• http://ns.adobe.com/xap/1.0/mm/
• http://ns.adobe.com/xap/1.0/rights/

Embedded domains

• ggtraff.ru
• cdn.shopify.com
• www.w3.org
• purl.org
• ns.adobe.com

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report