MALICIOUS — 7735e61.pdf
MALICIOUS — 7735e61.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 3 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
daf7e80370c6b1ab2b46403ab639ca82f31d2e4b1cb20e5bd6318e926f9a49e4 - SHA-1:
3c3f5bc4f3828e18b60aa4aebc0eb73a7708ff05 - MD5:
37ddb649e9cf2ec7b1fa891765b8661d - ssdeep:
768:ngGzpDDp3+x+wWSvMJMsnZkLIsxxWRVUqSNmR+YMrZPlM3dy:gGFXptoMbZkLTxBmR+fPlM3dy - TLSH:
T132316CF300ABED8C7A8B9B039DBB2959618AD78C72379750058C772DD4BC6AD7E00521 - Submitted as: 7735e61.pdf
- File type: pdf · Size: 41494 bytes
- Verdict: malicious (75/100)
Detections (3 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Microsoft Defender: flagged
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://saxexowiki.weebly.com/uploads/1/3/0/9/130969873/jatitowojol.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://gettraff.ru/wb?keyword=similes%20worksheet%20for%20grade%205%20with%20answers, https://uploads.strikinglycdn.com/files/1daf14c0-13df-4952-925a-2ba5a203bf0b/95773109152.pdf, https://uploads.strikinglycdn.com/files/06b65daa-13e5-4d53-ad99-fc567ac36d19/juvokinesakufekuvu.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/wb?keyword=similes%20worksheet%20for%20grade%205%20with%20answers
- https://uploads.strikinglycdn.com/files/1daf14c0-13df-4952-925a-2ba5a203bf0b/95773109152.pdf
- https://uploads.strikinglycdn.com/files/06b65daa-13e5-4d53-ad99-fc567ac36d19/juvokinesakufekuvu.pdf
- https://uploads.strikinglycdn.com/files/ce6343a5-4595-470e-b9e5-2b7e472f6c50/panoxiwofa.pdf
- https://uploads.strikinglycdn.com/files/f0aedbd9-9e95-4f7a-ab8b-38a559fde0db/gozapad.pdf
- https://uploads.strikinglycdn.com/files/647074a6-3808-4931-8dfa-e3d489e46863/zonaj.pdf
- https://natizupasa.weebly.com/uploads/1/3/1/4/131437725/fizosudusozi_virirajam.pdf
- https://saxexowiki.weebly.com/uploads/1/3/0/9/130969873/jatitowojol.pdf
- https://duxebiforup.weebly.com/uploads/1/3/4/0/134013009/6e2226a4.pdf
- https://dufejubodumafeb.weebly.com/uploads/1/3/4/4/134444341/9294194d.pdf
- https://kibutabez.weebly.com/uploads/1/3/4/4/134438896/b3bdce8a7097d9c.pdf
- https://s3.amazonaws.com/ruzaganog/43429398883.pdf
- https://s3.amazonaws.com/rizijubovapuk/wedimalezokemelewegulu.pdf
- https://s3.amazonaws.com/fezenur/19747895234.pdf
- https://s3.amazonaws.com/megelugik/moments_skewness_and_kurtosis.pdf
- https://s3.amazonaws.com/dujepav/ielts_general_writing_task_1_topics_with_answers.pdf
- https://s3.amazonaws.com/desenaz/beginner_french_vocabulary.pdf
- https://s3.amazonaws.com/rekorewexidiwo/attack_on_titan_volume_22.pdf
- https://s3.amazonaws.com/napisakaluja/70959843681.pdf
- https://s3.amazonaws.com/wusigipufuvowix/anemia_en_nios_en_el_peru.pdf
- https://s3.amazonaws.com/mamukawaxatali/oxford_english_mini_dictionary_download.pdf
- https://s3.amazonaws.com/bejenosugede/korean_language_tutorial.pdf
- https://s3.amazonaws.com/henghuili-files2/24791939829.pdf
- https://debasomi.weebly.com/uploads/1/3/0/7/130739769/6b2796663a367e.pdf
- https://tufelovewojamex.weebly.com/uploads/1/3/4/3/134331554/4401797.pdf
Embedded domains
- gettraff.ru
- uploads.strikinglycdn.com
- natizupasa.weebly.com
- saxexowiki.weebly.com
- duxebiforup.weebly.com
- dufejubodumafeb.weebly.com
- kibutabez.weebly.com
- s3.amazonaws.com
- debasomi.weebly.com
- tufelovewojamex.weebly.com
- dojifidixiwaji.weebly.com
- fidevawane.weebly.com
- tedumuwoke.weebly.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report