MALICIOUS — jusogeg.pdf
MALICIOUS — jusogeg.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
cf0ddc1990b286f1405a0036b1b444f77cd4708e3d71595906f26c332b05e44a - SHA-1:
d362fdc2c476c38357abb477e81f2a3b2ba2f5a7 - MD5:
06be38c27034f1ff47d3553cc4c9beb9 - ssdeep:
768:kgGzpDfeYJdW1PgX3mDnuOtd0xy7mVLja7eEPJvROii8C22eu11b6Kj:RGFzer4OMomVLjKeEBJOaAD1B6Kj - TLSH:
T121337CF310E3ED8C7BCB9B93ADBB119D548A878861329B904488767DC5BC5AC7F10960 - Submitted as: jusogeg.pdf
- File type: pdf · Size: 48763 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://moxitasa.weebly.com/uploads/1/3/1/4/131454719/bomoworejitin-jijuvu-dinavo.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://gettraff.ru/wb?keyword=sistema%20monista%20y%20dualista%20pdf, https://moxitasa.weebly.com/uploads/1/3/1/4/131454719/bomoworejitin-jijuvu-dinavo.pdf, https://genigudepa.weebly.com/uploads/1/3/1/0/131070712/4e0d994f.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/wb?keyword=sistema%20monista%20y%20dualista%20pdf
- https://s3.amazonaws.com/zirojopemup/59332988721.pdf
- https://s3.amazonaws.com/mejifavo/riesgo_de_mercado.pdf
- https://s3.amazonaws.com/wonoti/9856360475.pdf
- https://s3.amazonaws.com/sugaguxagu/jezajexubewinesesam.pdf
- https://s3.amazonaws.com/saziwijaxodav/pubofesivazagovabitu.pdf
- https://moxitasa.weebly.com/uploads/1/3/1/4/131454719/bomoworejitin-jijuvu-dinavo.pdf
- https://genigudepa.weebly.com/uploads/1/3/1/0/131070712/4e0d994f.pdf
- https://xazapadikud.weebly.com/uploads/1/3/1/8/131871762/dec37ed0cd9b5.pdf
- https://guwomenod.weebly.com/uploads/1/3/0/8/130873843/pejajofedaxevaw_kozadesupuke.pdf
- https://cdn.shopify.com/s/files/1/0502/6965/1129/files/ladozijezesusib.pdf
- https://cdn.shopify.com/s/files/1/0501/6286/0197/files/96010519107.pdf
- https://cdn.shopify.com/s/files/1/0503/2447/2002/files/best_linux_distro_android_development.pdf
- https://cdn.shopify.com/s/files/1/0432/5752/8478/files/10014514587.pdf
- https://cdn.shopify.com/s/files/1/0479/6694/5447/files/single_phase_semi_converter.pdf
- https://s3.amazonaws.com/zuxadol/87280861007.pdf
- https://s3.amazonaws.com/gupuso/fernando_pessoa_poems_in_english.pdf
- https://s3.amazonaws.com/xanebavifamopez/winebuxoselokoxum.pdf
- https://s3.amazonaws.com/henghuili-files2/catechism_of_trent.pdf
- https://uploads.strikinglycdn.com/files/e9df33c4-ae80-4cca-b6b1-c27099a273ff/4128633746.pdf
- https://uploads.strikinglycdn.com/files/dffffdf4-23a6-4e9d-b522-c3ceae2c9488/47678417397.pdf
- https://uploads.strikinglycdn.com/files/92a66752-6275-4abe-966a-ca6f5bc26b96/xifepixefefaruzubux.pdf
- https://uploads.strikinglycdn.com/files/a75a23c9-6e46-4ad2-9747-3d076e2a2f8a/kiviroginekudojifeju.pdf
- https://uploads.strikinglycdn.com/files/c641d3c4-d7bc-4e6e-b76f-376a54f08c89/english_connectors_list.pdf
- https://koxoganonigowup.weebly.com/uploads/1/3/1/4/131408343/pisewane-ludakin-vuwitafi.pdf
Embedded domains
- gettraff.ru
- s3.amazonaws.com
- moxitasa.weebly.com
- genigudepa.weebly.com
- xazapadikud.weebly.com
- guwomenod.weebly.com
- cdn.shopify.com
- uploads.strikinglycdn.com
- koxoganonigowup.weebly.com
- tunimesepet.weebly.com
- sibakixode.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report