MALICIOUS
100
Risk Score
Malware Insights
MITRE ATT&CK
T1566.001 Spearphishing Attachment
The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While the document body is heavily obfuscated, the presence of numerous links suggests an attempt to manipulate search engine results or direct users to a large collection of external resources. The ML_NYX_PDF_MALICIOUS heuristic further supports the malicious nature of the file. No scripts were extracted from this sample.
Machine Learning
- Nyx PDF Classifier malicious score 0.9924
Heuristics 3
-
Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARMSmall PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
-
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTONDocument contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://muicuiu.dumb1.com/1a06a09a07a01a06/Abraham-Lincoln-Vampire-Hunter-by-Seth-Grahame-Smith.pdf
- http://muicuiu.dumb1.com/4a03a01a07a08a08/Abraham-Lincoln-Vampire-Hunter-by-Seth-Grahame-Smith.pdf
- http://muicuiu.dumb1.com/1a00a03a05a09a07a03/Abraham-Lincoln-Vampire-Hunter-by-Seth-Grahame-Smith.pdf
- http://muicuiu.dumb1.com/4a07/The-Last-American-Vampire-Abraham-Lincoln-Vampire-Hunter-2-by-Seth-Grahame-Smith.pdf
- http://muicuiu.dumb1.com/1a05a01a05a00a06/The-Last-American-Vampire-by-Seth-Grahame-Smith.pdf
- http://muicuiu.dumb1.com/4a04a04a02a09/Unholy-Night-by-Seth-Grahame-Smith.pdf
- http://muicuiu.dumb1.com/4a03a07a05a08a09/Abraham-Lincoln-Great-Speeches-by-Abraham-Lincoln.pdf
- http://muicuiu.dumb1.com/1a01a04a06a07a00a04/The-Collected-Works-of-Abraham-Lincoln-by-Abraham-Lincoln.pdf
- http://muicuiu.dumb1.com/2a05a04a06a08a08/Works-of-Abraham-Lincoln-Includes-Inaugural-Addresses-State-of-the-Union-Addresses-Cooper-s-Union-Speech-Gettysburg-Address-House-Divided-Speech-MORE-by-Abraham-Lincoln.pdf
- http://muicuiu.dumb1.com/7a03a03a07a01a00/The-Lincoln-Memorial-Album-Immortelles-Excerpts-by-Abraham-Lincoln.pdf
- http://muicuiu.dumb1.com/7a00a04a04a02a08/Statues-of-Abraham-Lincoln-Avard-Tennyson-Fairbanks-Personal-Excerpt-from-Newspapers-and-Other-Sources-by-Lincoln-Financial-Foundation-Collection.pdf
- http://muicuiu.dumb1.com/7a00a04a04a03a01/Statues-of-Abraham-Lincoln-Avard-Tennyson-Fairbanks-Correspondence-Excerpts-from-Newspapers-and-Other-Sources-by-Lincoln-Financial-Foundation-Collection.pdf
- http://muicuiu.dumb1.com/2a05a04a04a03a05/Speeches-and-Writings-by-Abraham-Lincoln.pdf
- http://muicuiu.dumb1.com/4a00a04a02a03a04/Who-Was-Abraham-Lincoln-by-Janet-B-Pascal.pdf
- http://muicuiu.dumb1.com/7a00a00a08a07/Abraham-Lincoln-by-Ingri-d-39-Aulaire.pdf
- http://muicuiu.dumb1.com/3a06a01a00a05a07/The-Vampire-Hunter-s-Daughter-Part-III-The-Vampire-Hunter-s-Daughter-3-by-Jennifer-Malone-Wright.pdf
- http://muicuiu.dumb1.com/3a06a01a03a01a01/The-Vampire-Hunter-s-Daughter-Part-IV-The-Vampire-Hunter-s-Daughter-4-by-Jennifer-Malone-Wright.pdf
- http://muicuiu.dumb1.com/5a01a07a01a09a04/Recollected-Words-of-Abraham-Lincoln-by-Don-E-Fehrenbacher.pdf
- http://muicuiu.dumb1.com/4a03a06a05a07a03/Abraham-Lincoln-s-Daily-Devotional-by-Paul-F-Crouch-Sr-.pdf
- http://muicuiu.dumb1.com/4a03a06a07a01a01/Abraham-Lincoln-Redeemer-President-by-Allen-C-Guelzo.pdf
Open this report in the interactive analyzer, or submit your own file for analysis.