MALICIOUS — lanabexugex.pdf
MALICIOUS — lanabexugex.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (75/100). 2 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.
Identification
- SHA-256:
ea54d002e2673c91c40f40c75083f091f3c0a0a51682e0db421ab848527bf075 - SHA-1:
bfa53219bb370c7d3c39108d2f15cc7c2b34e5fd - MD5:
16716f1e54fb29ff2c22d9cb1c3cce5c - ssdeep:
768:wgGzpDAhpCJscrOLBgyEp1N751NKlqNlxpY3xLWvEW/2/X9FG1rp1i:dGF6p0T1NKlME3NWvEW/+9Sp1i - TLSH:
T1F2328DF350E7FD4CBB8B9B479EA711A6614AD788613787A0448C7B2CC8BC5BD6E10910 - Submitted as: lanabexugex.pdf
- File type: pdf · Size: 47513 bytes
- Verdict: malicious (75/100)
Detections (2 of 50 engines)
- MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
- Emsisoft (Emergency Kit): PDF.Spam.Heur.1
MITRE ATT&CK
Why this verdict
The malicious score of 75/100 is the fusion of 4 weighted signals:
- Embedded link rated malicious by URL analysis: https://papunagaku.weebly.com/uploads/1/3/1/3/131384156/9293069.pdf - network signal, weight 0.70, confidence 0.80
- Embedded network infrastructure: https://ggtraff.ru/wb?keyword=coats%2020%2020%20tire%20changer%20manual, https://tenagudewujuga.weebly.com/uploads/1/3/1/1/131164273/99b44ff8228bfeb.pdf, https://zesopupejilit.weebly.com/uploads/1/3/0/7/130738861/jixebezenefelod.pdf - static signal, weight 0.35, confidence 0.60
- Document active content: uri-action - static signal, weight 0.30, confidence 0.60
- Packing/obfuscation: high-entropy-blob - static signal, weight 0.25, confidence 0.55
Dynamic analysis
No runtime behaviour was captured for this sample, so the analysis above is static only. That is a limit of this run rather than evidence the sample does nothing.
Embedded URLs
- https://ggtraff.ru/wb?keyword=coats%2020%2020%20tire%20changer%20manual
- https://tenagudewujuga.weebly.com/uploads/1/3/1/1/131164273/99b44ff8228bfeb.pdf
- https://zesopupejilit.weebly.com/uploads/1/3/0/7/130738861/jixebezenefelod.pdf
- https://papunagaku.weebly.com/uploads/1/3/1/3/131384156/9293069.pdf
- https://genigudepa.weebly.com/uploads/1/3/1/0/131070712/6023986.pdf
- https://jiwepurojal.weebly.com/uploads/1/3/0/7/130775762/0a6361f8bc7e.pdf
- https://finazodaxuvoj.weebly.com/uploads/1/3/2/6/132682535/8527877.pdf
- https://tavumake.weebly.com/uploads/1/3/2/7/132740551/53b6a12ae85492c.pdf
- https://dejuxowiku.weebly.com/uploads/1/3/0/7/130738850/bexedokixirop.pdf
- https://nobinetezo.weebly.com/uploads/1/3/0/9/130969761/zuzatibenivodup-panufeju-ritofutaki.pdf
- https://uploads.strikinglycdn.com/files/12cd319f-b9b4-4fd9-a694-512fa1767ae3/gavowusutasexosowipixexur.pdf
- https://uploads.strikinglycdn.com/files/656b85a2-d5c9-42aa-9806-a63a3777f427/mevexonomirokutuwove.pdf
- https://uploads.strikinglycdn.com/files/37de043f-631a-4734-be30-ac416bdc704b/madixipo.pdf
- https://uploads.strikinglycdn.com/files/86add584-9343-468f-9bcc-5693063ad7b7/kepina.pdf
- https://uploads.strikinglycdn.com/files/dbb480da-442f-4982-a2d6-386fbcef05f1/sekasito.pdf
- https://cdn.shopify.com/s/files/1/0483/8529/4494/files/blue_devil_radiator_flush_and_degreaser.pdf
- https://cdn.shopify.com/s/files/1/0491/7038/3014/files/feminist_literary_criticism_definition.pdf
- https://cdn.shopify.com/s/files/1/0431/2642/3708/files/head_soccer_2018_world_cup.pdf
- https://site-1037191.mozfiles.com/files/1037191/47836043538.pdf
- https://site-1039748.mozfiles.com/files/1039748/linonugiwozedevewidaguz.pdf
- https://site-1041483.mozfiles.com/files/1041483/61782731180.pdf
- https://site-1037120.mozfiles.com/files/1037120/19133186172.pdf
- https://site-1041693.mozfiles.com/files/1041693/25745842321.pdf
- https://cdn-cms.f-static.net/uploads/4365601/normal_5f87b0963f22b.pdf
- https://cdn-cms.f-static.net/uploads/4366987/normal_5f87582dd839e.pdf
Embedded domains
- ggtraff.ru
- tenagudewujuga.weebly.com
- zesopupejilit.weebly.com
- papunagaku.weebly.com
- genigudepa.weebly.com
- jiwepurojal.weebly.com
- finazodaxuvoj.weebly.com
- tavumake.weebly.com
- dejuxowiku.weebly.com
- nobinetezo.weebly.com
- uploads.strikinglycdn.com
- cdn.shopify.com
- site-1037191.mozfiles.com
- site-1039748.mozfiles.com
- site-1041483.mozfiles.com
- site-1037120.mozfiles.com
- site-1041693.mozfiles.com
- cdn-cms.f-static.net
- www.w3.org
- purl.org
- ns.adobe.com
Latest analyzed threats · ATT&CK coverage
Analyzed on MalwareAnalyzer by Cyble · Open interactive report