SUSPICIOUS — ramedufowotogamuna.pdf
SUSPICIOUS — ramedufowotogamuna.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a suspicious verdict (44/100). 3 of 53 detection engines flagged it.
Identification
- SHA-256:
dbf465ec8db1f31116d1990bf0b9f4fb97adb0b0504daeabadcd3cd40d40a411 - SHA-1:
a6f2e5529678fdca408347b109d93c4209511beb - MD5:
770030dd0b5fc6acec9c5909e1b5b118 - ssdeep:
768:WgGzpDcedjC2wfH6or+hozkK6KqkZ04yi08ywXk8YMjTlJ7LH:DGFoe7orTzkKpqk+9i00k8hjTlJ7LH - TLSH:
T17D337DF300A7DD8C3AC69F039AEA25AEA58AD34C6033A7655548673CD0BC2BD7F50910 - Submitted as: ramedufowotogamuna.pdf
- File type: pdf · Size: 48025 bytes
- Verdict: suspicious (44/100)
Detections (3 of 53 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
- Kaspersky (KVRT): HEUR:Trojan.Script.Generic
Why this verdict
The suspicious score of 44/100 is the fusion of 3 weighted signals:
- Embedded network infrastructure: https://cctraff.ru/strik?keyword=pre+algebra+math+worksheets+with+answers, https://lodirunesu.weebly.com/uploads/1/3/0/8/130874391/7376adbed2.pdf, https://finiluxexolije.weebly.com/uploads/1/3/1/8/131856594/bafirop.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis (windows)
0 behavior events · 0 ATT&CK techniques · 0 dropped files.
Runtime network
- none
Embedded URLs
- https://cctraff.ru/strik?keyword=pre+algebra+math+worksheets+with+answers
- https://lodirunesu.weebly.com/uploads/1/3/0/8/130874391/7376adbed2.pdf
- https://finiluxexolije.weebly.com/uploads/1/3/1/8/131856594/bafirop.pdf
- https://zulatikuwa.weebly.com/uploads/1/3/0/7/130776211/4af6af8969b2be.pdf
- https://zoxuzuxebexot.weebly.com/uploads/1/3/0/9/130969059/4d5351fbb209c0.pdf
- https://xebikazogede.weebly.com/uploads/1/3/2/7/132740990/visepijejasikari.pdf
- https://kidunaxu.weebly.com/uploads/1/3/1/4/131437100/21a1e1da8129e8f.pdf
- https://jamuseramomuf.weebly.com/uploads/1/3/1/8/131871426/2c41886a7012.pdf
- https://punadojum.weebly.com/uploads/1/3/2/6/132680976/nijeponot_mejaradew_dexalovati.pdf
- https://nudojafobedem.weebly.com/uploads/1/3/1/3/131379550/katozuliwamu.pdf
- https://genigudepa.weebly.com/uploads/1/3/1/0/131070712/3e75a4e696b2f2d.pdf
- https://zozilevijuni.weebly.com/uploads/1/3/1/3/131383476/xamebarumada_satono.pdf
- https://riwisasivituw.weebly.com/uploads/1/3/1/0/131070703/8123918.pdf
- https://mojenosude.weebly.com/uploads/1/3/1/3/131382274/7229121.pdf
- https://batagokefo.weebly.com/uploads/1/3/1/0/131070859/8095910.pdf
- https://jakedekokobara.weebly.com/uploads/1/3/1/3/131381480/7d3707d5d.pdf
- https://remewizefo.weebly.com/uploads/1/3/1/8/131856163/bugege_soxowi.pdf
- https://cdn-cms.f-static.net/uploads/4366022/normal_5f87096a03b53.pdf
- https://cdn-cms.f-static.net/uploads/4365628/normal_5f8706185df41.pdf
- https://site-1038471.mozfiles.com/files/1038471/lakufidogimegubutug.pdf
- https://site-1042343.mozfiles.com/files/1042343/terutajunug.pdf
- https://site-1043690.mozfiles.com/files/1043690/tugusukavurozajonejemuwu.pdf
- https://site-1037191.mozfiles.com/files/1037191/zarumeripovadedibojujuwem.pdf
- https://site-1037885.mozfiles.com/files/1037885/2658326010.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
Embedded domains
- cctraff.ru
- lodirunesu.weebly.com
- finiluxexolije.weebly.com
- zulatikuwa.weebly.com
- zoxuzuxebexot.weebly.com
- xebikazogede.weebly.com
- kidunaxu.weebly.com
- jamuseramomuf.weebly.com
- punadojum.weebly.com
- nudojafobedem.weebly.com
- genigudepa.weebly.com
- zozilevijuni.weebly.com
- riwisasivituw.weebly.com
- mojenosude.weebly.com
- batagokefo.weebly.com
- jakedekokobara.weebly.com
- remewizefo.weebly.com
- cdn-cms.f-static.net
- site-1038471.mozfiles.com
- site-1042343.mozfiles.com
- site-1043690.mozfiles.com
- site-1037191.mozfiles.com
- site-1037885.mozfiles.com
- www.w3.org
- purl.org
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report