MALICIOUS — fexepagove.pdf

MALICIOUS — fexepagove.pdf is a pdf sample analyzed by MalwareAnalyzer by Cyble with a malicious verdict (94/100). 5 of 50 detection engines flagged it, exhibiting 1 ATT&CK technique.

Identification

• SHA-256: 5683b177ce06e24653193faddb7cd3b2207cbea3e77dfbc5157d862d94a300db
• SHA-1: 9edbfbcecae461e27924b1a2fa11af4e41d7444b
• MD5: f3847e5024ea188a029e36d818acc839
• File type: pdf · Size: 82371 bytes
• Verdict: malicious (94/100)

Detections (5 of 50 engines)

• MalwareAnalyser heuristics (entropy/packer): high-entropy-blob
• ClamAV (daily): Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0
• Kaspersky (KVRT): HEUR:Hoax.PDF.Phish.gen
• Emsisoft (Emergency Kit): PDF.Spam.Heur.1
• Trellix Stinger (McAfee): PDF/Phish-FAB!F3847E5024EA

MITRE ATT&CK

• T1566.002

Embedded URLs

• https://maypoin.ru/wb?keyword=does%20my%20whirlpool%20refrigerator%20have%20a%20reset%20button
• https://cdn.sqhk.co/turanexode/hiaOZjc/natuzenemesib.pdf
• http://migriruy.ru/40340253285z17my.pdf
• https://uploads.strikinglycdn.com/files/9fcba6e8-c2e1-4dd7-9030-29dd1eb35a56/54608552682.pdf
• http://suguxilaxiz.22web.org/86773818998.pdf
• http://letilemugemin.66ghz.com/dulixul.pdf
• https://cdn.sqhk.co/potasuregoz/Uhiidie/kisurirulitobafa.pdf
• https://uploads.strikinglycdn.com/files/44d6a26e-f42a-4b21-b700-ab071cc6d690/93412288449.pdf
• https://uploads.strikinglycdn.com/files/234f81c0-600c-4dd7-a81b-2df0c91481da/huffy_cruiser_bike_seat_cover.pdf
• https://uploads.strikinglycdn.com/files/8aeef2be-db0b-48c6-ab34-32840a0ba232/11114744239.pdf
• http://vebofituzor.iblogger.org/sufatemawazagejubufenenex.pdf
• https://cdn.sqhk.co/zupuguvawaj/QJENijb/drive_da_klasor_paylasma.pdf
• https://cdn.sqhk.co/nufanusiki/ghejjhj/46702500475.pdf
• https://cdn.sqhk.co/bidekidarub/9hjhsrm/pay_range_laundry_near_me.pdf
• http://hotel-engels.ru/dunkin_donuts_jelly_munchkins_ingredients230ph.pdf
• http://changely.club/sixonozunapepenopemixarlwd5.pdf
• http://gisesufuxezemud.epizy.com/android_refresh_adapter_recyclerview.pdf
• http://phtech.site/12235493825vsq19.pdf
• http://luxilim.epizy.com/wopizifita.pdf
• https://cdn.sqhk.co/vibebexez/kifqggL/wolefadaxezinudumudikid.pdf
• http://winoorama.site/39040444370cq7bh.pdf
• http://bettermoneytips.com/wibimesaboncskry.pdf
• https://cdn.sqhk.co/fowifabibu/agcwvjf/broadsheet_best_cocktail_bars_sydney.pdf
• http://natlab.ru/wilson_2020_hardness_tester_manualyom2l.pdf
• http://www.w3.org/1999/02/22-rdf-syntax-ns#

Embedded domains

• maypoin.ru
• cdn.sqhk.co
• migriruy.ru
• uploads.strikinglycdn.com
• suguxilaxiz.22web.org
• letilemugemin.66ghz.com
• vebofituzor.iblogger.org
• hotel-engels.ru
• changely.club
• gisesufuxezemud.epizy.com
• phtech.site
• luxilim.epizy.com
• winoorama.site
• bettermoneytips.com
• natlab.ru
• www.w3.org
• purl.org
• ns.adobe.com

Latest analyzed threats · ATT&CK coverage

Analyzed on MalwareAnalyzer by Cyble · Open interactive report