Malicious PDF — malware analysis report

Static analysis result for SHA-256 03e0f0fbfe403307…

MALICIOUS

PDF

36.1 KB Created: 2020-03-18 16:33:56 +00:00 Authoring application: mPDF 5.7
MD5: 0262097854ae6fce894de2504fec49a2 SHA-1: 688c0d0244499391cabf7af085fe3de6b1c168bf SHA-256: 03e0f0fbfe40330799a41022ea8b2fbbf96de4cf3d9004a6d9a1d1a33bcf8a5a
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to a single, suspicious domain. This behavior is indicative of a link farm or SEO poisoning attack, designed to drive traffic to malicious content. The ML classifier also flagged this PDF as malicious, supporting the assessment of malicious intent.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9657

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ieuicufioao.myhome.cx/1551554550558553558/Samtliche-Werke-Band-7-1882-1901-Der-Soziale-Aufgabe-Der-Hoheren-Schulen-Beitrage-in-Rein-Enzyklopadisches-Handbuch-Der-Padagogik-Sowie-Andere-Abhandlungen-by-Otto-Willmann.pdf
    • http://ieuicufioao.myhome.cx/1550558551550550550/S-mtliche-Werke-nach-Epochen-seines-Schaffens-In-Leinen-S-mtliche-Werke-16-M-nchner-Ausgabe-Aus-meinem-Leben-Dichtung-und-Wahrheit-Bd-16-by-Johann-Wolfgang-von-Goethe.pdf
    • http://ieuicufioao.myhome.cx/1550552553553557554/Samtliche-Werke-Band-2-Ethik-in-geometrischer-Ordnung-dargestellt-by-Baruch-Spinoza.pdf
    • http://ieuicufioao.myhome.cx/8559553556551558/Old-Shatterhand-in-der-Heimat-und-andere-Erz-hlungen-aus-seiner-Werkstatt-Band-79-der-Gesammelten-Werke-by-Karl-May.pdf
    • http://ieuicufioao.myhome.cx/9554553559557552/Vollst-ndiges-Handbuch-Der-Uhrmacherkunst-Besonders-in-Beziehung-Auf-Thurm-Wand-Und-Stutzuhren-Taschenuhren-Aller-Art-ALS-Spindel-Cylinder-Und-Ankeruhren-U-S-W-Mit-Und-Ohne-Repetir-Und-Andere-Werke-Ferner-Astronomische-Und-Nautische-Uhren-Sowohl-by-Emanuel-Schreiber.pdf
    • http://ieuicufioao.myhome.cx/9556559550554559/Robert-Musil-S-mtliche-Werke-in-einem-Band-Romane-Literaturkritiken-Essays-Autobiographische-Schriften-Der-Mann-ohne-Eigenschaften-Die-Verwirrungen-Das-verzauberte-Haus-by-Robert-Musil.pdf
    • http://ieuicufioao.myhome.cx/1550552557554555554/Jules-Verne-Gesammelte-Werke-S-mtliche-Werke-Andhofs-gro-e-Literaturbibliothek-by-Jules-Verne.pdf
    • http://ieuicufioao.myhome.cx/1551551559556558551/Die-Internationale-Polarforschung-1882-1883-Geschichtlicher-Theil-Und-in-Einem-Anhange-Mehrere-Einzelne-Abhandlungen-Physikalischen-Und-Sonstigen-Inhalts-1891-VII-243-2-120-P-Col-Fold-Front-10-Pl-5-Maps-1-Fold-1-Diagr-by-Neumayer.pdf
    • http://ieuicufioao.myhome.cx/1550552557555553557/S-mtliche-Werke-in-drei-B-nden-by-E-T-A-Hoffmann.pdf
    • http://ieuicufioao.myhome.cx/1550554556557558558/S-mtliche-Werke-F-r-Die-Laute-Complete-Works-For-The-Lute-by-Johann-Sebastian-Bach.pdf
    • http://ieuicufioao.myhome.cx/1551555558553554559/Praxis-Handbuch-Behinderung-und-Rollstuhl-Leitfaden-f-r-Menschen-mit-erworbener-K-rperbehinderung-sowie-f-r-Angeh-rige-und-Pflegende-by-Rainer-Schulze-Muhr.pdf
    • http://ieuicufioao.myhome.cx/1550551557559551552/Ueber-Philosophische-Tradition-Eine-Akademische-Antrittsrede-Gehalten-in-Der-Aula-Der-Universit-t-Jena-Am-9-December-1882-by-Otto-Liebmann.pdf
    • http://ieuicufioao.myhome.cx/9554555559559557/Die-Verwandlung-Brief-An-Den-Vater-Und-Andere-Werke-Mit-Materialien-by-Franz-Kafka.pdf
    • http://ieuicufioao.myhome.cx/1550557552557551554/H-gar-der-Schreckliche-Rein-in-die-Kartoffeln-Band-31-Cartoons-by-Dik-Browne.pdf
    • http://ieuicufioao.myhome.cx/1551554557552557558/S-mtliche-Erz-hlungen-4-Die-vertauschten-K-pfe-und-andere-Erz-hlungen-by-Thomas-Mann.pdf
    • http://ieuicufioao.myhome.cx/9557554553550556/Die-Morde-in-der-Rue-Morgue-und-andere-Erz-hlungen-S-mtliche-Erz-hlungen-2-by-Edgar-Allan-Poe.pdf
    • http://ieuicufioao.myhome.cx/1550557554555556551/S-mtliche-Werke-Ludwig-Ganghofers-I-by-Ludwig-Ganghofer.pdf
    • http://ieuicufioao.myhome.cx/8559555554556556/S-mtliche-Werke-Aus-dem-Tagebuch-eines-Hundes-Deutsche-Thesen-gegen-den-Papst-und-seine-Dunkelm-nner-Visionen-Das-Liebeskonzil-Genie-und-Wahnsinn-in-Tavistock-Square-by-Oskar-Panizza.pdf
    • http://ieuicufioao.myhome.cx/9554552553558556/S-mtliche-Werke-ber-300-Titel-in-einem-Buch---Vollst-ndige-Ausgaben-Winnetou-Der-Schatz-im-Silbersee-Durch-die-W-ste-Der-Schut-Old-Surehand-Old-Firehand-und-viel-mehr-by-Karl-May.pdf
    • http://ieuicufioao.myhome.cx/1550556553556550556/S-mtliche-Werke-von-Karl-May-Winnetou-Der-Schatz-im-Silbersee-Durch-die-W-ste-Der-Schut-Old-Surehand-Der-Oelprinz-In-den-Schluchten-des-Balkan-Old-Firehand-und-viel-mehr-by-Karl-May.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.