Malicious PDF — malware analysis report

Static analysis result for SHA-256 046f517e31dbebf1…

MALICIOUS

PDF

18.6 KB Created: 2020-03-18 21:40:47 +00:00 Authoring application: mPDF 5.7 First seen: 2020-12-25
MD5: ffeac539c79e55e77eaaac7b1510cffa SHA-1: 77f9e54c95da5950800426a83c3074eaf65b6d3f SHA-256: 046f517e31dbebf1f5ea0a4aeb9c8f0f5dc1baf9648f053fce9ca96183491044
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9754

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://calistazz.myhome.cx/3866865863867863/Thee-I-Love-by-Annette-Blair.pdf In PDF document text
    • http://calistazz.myhome.cx/4861867864861862/A-Winter-Heart-by-Annette-Blair.pdfIn PDF document text
    • http://calistazz.myhome.cx/3861866866860863/Sea-Scoundrel-Knave-of-Hearts-1-by-Annette-Blair.pdfIn PDF document text
    • http://calistazz.myhome.cx/4867868865862863/Untamable-Rogue-Rogues-Club-4-by-Annette-Blair.pdfIn PDF document text
    • http://calistazz.myhome.cx/4861867865868860/Captive-Scoundrel-Knave-of-Hearts-2-by-Annette-Blair.pdfIn PDF document text
    • http://calistazz.myhome.cx/1867868862868869/Cloaked-in-Malice-A-Vintage-Magic-Mystery-5-by-Annette-Blair.pdfIn PDF document text
    • http://calistazz.myhome.cx/1867868862866868/A-Veiled-Deception-A-Vintage-Magic-Mystery-1-by-Annette-Blair.pdfIn PDF document text
    • http://calistazz.myhome.cx/1866869862865865/Sex-and-the-Psychic-Witch-Triplet-Witch-Trilogy-1-by-Annette-Blair.pdfIn PDF document text
    • http://calistazz.myhome.cx/2863864869863861/How-Do-I-Love-Thee-Ladies-of-History-4-by-Nancy-Moser.pdfIn PDF document text
    • http://calistazz.myhome.cx/2867861863860862/I-Isaac-Take-Thee-Rebekah-Moving-from-Romance-to-Lasting-Love-by-Ravi-Zacharias.pdfIn PDF document text
    • http://calistazz.myhome.cx/7865861862863869/By-the-Iowa-Sea-A-Memoir-of-Disaster-and-Love-by-Joe-Blair.pdfIn PDF document text
    • http://calistazz.myhome.cx/1865863864864865/From-Cape-Town-with-Love-Tennyson-Hardwick-3-by-Blair-Underwood.pdfIn PDF document text
    • http://calistazz.myhome.cx/3866863863863866/Where-Fairy-Tales-Go-A-Love-Story-by-Annette-Ross.pdfIn PDF document text
    • http://calistazz.myhome.cx/7868865862861863/Blair-s-Chronological-and-Historical-Tables-from-the-Creation-to-the-Present-Time-With-Additions-and-Corrections-from-the-Most-Authentic-Writers-Including-the-Computation-of-St-Paul-as-Connecting-the-Period-from-the-Exode-to-the-Temple-by-John-Blair.pdfIn PDF document text
    • http://calistazz.myhome.cx/6865864867862861/Surviving-the-Fatherland-A-True-Coming-of-age-Love-Story-Set-in-WWII-Germany-by-Annette-Oppenlander.pdfIn PDF document text
    • http://calistazz.myhome.cx/5867869867867868/I-Conjure-Thee-by-Elixa-Everett.pdfIn PDF document text
    • http://calistazz.myhome.cx/3864869860865869/I-Thee-Wed-Worthington-4-by-Celeste-Bradley.pdfIn PDF document text
    • http://calistazz.myhome.cx/3864864862867867/To-Thee-Is-This-World-Given-by-Khel-Milam.pdfIn PDF document text
    • http://calistazz.myhome.cx/3869862860864/My-Country-Tis-of-Thee-by-Keith-Ellison.pdfIn PDF document text
    • http://calistazz.myhome.cx/2863869860868868/Thee-Hannah-by-Marguerite-de-Angeli.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.