Malicious PDF — malware analysis report

Static analysis result for SHA-256 05592c96353103dc…

MALICIOUS

PDF

18.7 KB Created: 2019-04-30 02:34:30 +01:00 Authoring application: mPDF 5.7
MD5: 3c29da004f64f26b186a914160750026 SHA-1: edddd7e55b45dcb12a413609e616415f3ab32939 SHA-256: 05592c96353103dc6d0f1424278e78b3cb4b00dcc48911eb866fc3af8ba12366
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic, which are likely intended to direct users to potentially malicious or spam websites. The ML_NYX_PDF_MALICIOUS heuristic also flagged this document with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/8202201204209204/The-Fall-of-Ventaris-The-Grey-City-2-by-Neil-McGarry.pdf
    • http://xiixmcuin.linkpc.net/2203202202205201/The-Duchess-of-the-Shallows-The-Grey-City-1-by-Neil-McGarry.pdf
    • http://xiixmcuin.linkpc.net/8202201205208203/Lost-in-the-Light-Preview-by-Neil-McGarry.pdf
    • http://xiixmcuin.linkpc.net/7207208207200204/Shreveport-and-Bossier-City-Photographs-and-Text-by-Neil-Johnson-With-a-Foreword-by-Jim-Montgomery-by-Neil-Johnson.pdf
    • http://xiixmcuin.linkpc.net/4206201209208207/A-Fall-of-Stardust-by-Neil-Gaiman.pdf
    • http://xiixmcuin.linkpc.net/1209200209202206/When-the-City-Sleeps-Unspoken-6-by-Marilyn-Grey.pdf
    • http://xiixmcuin.linkpc.net/1201205208204202/City-of-War-Rail-Black-Novels-1-by-Neil-Russell.pdf
    • http://xiixmcuin.linkpc.net/3203204205200203/The-Fall-of-the-Stone-City-by-Ismail-Kadare.pdf
    • http://xiixmcuin.linkpc.net/1200204208203209202/Pride-Before-Fall-Dreg-City-0-75-by-Kelly-Meding.pdf
    • http://xiixmcuin.linkpc.net/1202206204201201/Shadow-Rise-Shadow-Fall-2-by-Audrey-Grey.pdf
    • http://xiixmcuin.linkpc.net/9207200205200202/The-Fall-of-Hitler-s-Fortress-City-The-Battle-for-Konigsberg-1945-by-Isabel-Denny.pdf
    • http://xiixmcuin.linkpc.net/1200201200200209/Grey-Fifty-Shades-of-Grey-as-Told-by-Christian-A-11-Minute-HOOOTTTT-summary-by-Bern-Bolo.pdf
    • http://xiixmcuin.linkpc.net/8201202201204201/The-Rowen-Grey-Omnibus-A-Collection-of-Kinky-Erotic-amp-Romantic-Erotic-Stories-by-Rowen-Grey-by-Rowen-Grey.pdf
    • http://xiixmcuin.linkpc.net/8208207207205203/City-of-Bones-City-of-Ashes-City-of-Glass---Chroniken-der-Unterwelt-01---03-by-Cassandra-Clare.pdf
    • http://xiixmcuin.linkpc.net/1200206207209202205/Under-the-Western-Sky-Essays-on-the-Fiction-and-Music-of-Willy-Vlautin-Neil-Campbell-Editor-by-Neil-Campbell.pdf
    • http://xiixmcuin.linkpc.net/5205201206207208/Neverwhere-Hardcover-Illustrated-16-Aug-2016-by-Neil-Gaiman-by-Neil-Gaiman.pdf
    • http://xiixmcuin.linkpc.net/3206205202204205/Unnatural-Creatures-Stories-Selected-by-Neil-Gaiman-by-Neil-Gaiman.pdf
    • http://xiixmcuin.linkpc.net/8202201204209202/Triad-by-Terry-McGarry.pdf
    • http://xiixmcuin.linkpc.net/4202206209202209/Only-a-Breath-Apart-by-Katie-McGarry.pdf
    • http://xiixmcuin.linkpc.net/8202201204207209/Not-Every-Girl-by-Jane-McGarry.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.