MALICIOUS — febilatuvumo.pdf
MALICIOUS — febilatuvumo.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
e5940a38d887ac043484cd89c5bc5972c4131a0aee43be95d59c45472efda10c - SHA-1:
329240d7673f8b9aed55d9daaf43a97f669f48af - MD5:
174fd7e4b9b7921384a5292a7b307770 - ssdeep:
1536:9GFlpb7fl4nwheWZoLutg6Z9YDk/Jm7y3kRzn:AFlp3fW8lIuO69b8O3k5 - TLSH:
T1D6349EF39067ED4C7D8E7F439EA71299B08AD3CD5032D66044887A2D90BCAED7E40261 - Submitted as: febilatuvumo.pdf
- File type: pdf · Size: 52816 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://fulipevaxavu.weebly.com/uploads/1/3/2/6/132695351/a1676f7d42d0f.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://gettraff.ru/wb?keyword=pathfinder%20guides%20guide, https://fulipevaxavu.weebly.com/uploads/1/3/2/6/132695351/a1676f7d42d0f.pdf, https://zoxuzuxebexot.weebly.com/uploads/1/3/0/9/130969059/mukobuf.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://gettraff.ru/wb?keyword=pathfinder%20guides%20guide
- https://fulipevaxavu.weebly.com/uploads/1/3/2/6/132695351/a1676f7d42d0f.pdf
- https://zoxuzuxebexot.weebly.com/uploads/1/3/0/9/130969059/mukobuf.pdf
- https://lasajiboz.weebly.com/uploads/1/3/1/3/131379041/nevororugibafonev.pdf
- https://guwomenod.weebly.com/uploads/1/3/0/8/130873843/297c0.pdf
- https://sesuwulot.weebly.com/uploads/1/3/1/4/131438847/luloxanibi.pdf
- https://uploads.strikinglycdn.com/files/3907d914-f581-4766-ac28-03f8f1eb6efe/85961029979.pdf
- https://uploads.strikinglycdn.com/files/0fe06d43-b75b-4536-90a6-ad3b25321313/lavofesakodozif.pdf
- https://uploads.strikinglycdn.com/files/3ce2c5e2-ca20-4452-86a3-2f8a9e1f7dc0/fataditazaxesatapizu.pdf
- https://uploads.strikinglycdn.com/files/7af40667-5599-41e0-b2c9-36be71355377/wakulobixexalofo.pdf
- https://uploads.strikinglycdn.com/files/9d12c84d-3788-4ccd-8ea8-22b1b371d28d/bonisobib.pdf
- https://site-1038525.mozfiles.com/files/1038525/18002336525.pdf
- https://site-1043353.mozfiles.com/files/1043353/fosotifitedogiwejida.pdf
- https://site-1039150.mozfiles.com/files/1039150/petijoxanogosumu.pdf
- https://site-1037218.mozfiles.com/files/1037218/83222718634.pdf
- https://site-1043808.mozfiles.com/files/1043808/97179643937.pdf
- https://site-1038345.mozfiles.com/files/1038345/24513216107.pdf
- https://cdn-cms.f-static.net/uploads/4366337/normal_5f8714b7e29b2.pdf
- https://cdn-cms.f-static.net/uploads/4365657/normal_5f8700deeefc5.pdf
- https://site-1042767.mozfiles.com/files/1042767/parelodasekatokelibul.pdf
- https://site-1036729.mozfiles.com/files/1036729/56933996486.pdf
- https://site-1039278.mozfiles.com/files/1039278/vatafilav.pdf
- http://www.w3.org/1999/02/22-rdf-syntax-ns#
- http://purl.org/dc/elements/1.1/
- http://ns.adobe.com/pdf/1.3/
Embedded domains
- gettraff.ru
- fulipevaxavu.weebly.com
- zoxuzuxebexot.weebly.com
- lasajiboz.weebly.com
- guwomenod.weebly.com
- sesuwulot.weebly.com
- uploads.strikinglycdn.com
- site-1038525.mozfiles.com
- site-1043353.mozfiles.com
- site-1039150.mozfiles.com
- site-1037218.mozfiles.com
- site-1043808.mozfiles.com
- site-1038345.mozfiles.com
- cdn-cms.f-static.net
- site-1042767.mozfiles.com
- site-1036729.mozfiles.com
- site-1039278.mozfiles.com
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report