Malicious PDF — malware analysis report

Static analysis result for SHA-256 0573757474e2efab…

MALICIOUS

PDF

16.7 KB Created: 2019-06-04 10:12:11 +01:00 Authoring application: mPDF 5.7
MD5: 4cc779c46bc4ce545289026b1a0c1a75 SHA-1: 0e0d1fd47f01b098df3caf21cfc65103b84e5971 SHA-256: 0573757474e2efaba3c913f1ed1f0f841114eb59933694f8fd28960d833169b3
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links, many of which point to external PDF files. This behavior is indicative of a link farm or a method to distribute further malicious content. The ML classifier also flagged this PDF as malicious, increasing the confidence in this assessment.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9787

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/2732734735734736/The-Cat-on-the-Mat-Is-Flat-by-Andy-Griffiths.pdf
    • http://cefasfese.4pu.com/8734737737731/The-26-Storey-Treehouse-by-Andy-Griffiths.pdf
    • http://cefasfese.4pu.com/2739732733735735/The-Day-My-Butt-Went-Psycho-by-Andy-Griffiths.pdf
    • http://cefasfese.4pu.com/2732734735734735/Zombie-Butts-From-Uranus-by-Andy-Griffiths.pdf
    • http://cefasfese.4pu.com/1730737735737732730/Duck-in-a-Truck-in-the-Muck-by-Andy-Griffiths.pdf
    • http://cefasfese.4pu.com/2737731733734738/The-Strange-Death-of-Fiona-Griffiths-Fiona-Griffiths-3-by-Harry-Bingham.pdf
    • http://cefasfese.4pu.com/2738736736737739/The-Strange-Death-of-Fiona-Griffiths-Fiona-Griffiths-3-by-Harry-Bingham.pdf
    • http://cefasfese.4pu.com/4736735739734732/The-Strange-Death-of-Fiona-Griffiths-Fiona-Griffiths-3-by-Harry-Bingham.pdf
    • http://cefasfese.4pu.com/1734731735737730/Uncle-Andy-s-A-Faabbbulous-Visit-With-Andy-Warhol-by-James-Warhola.pdf
    • http://cefasfese.4pu.com/2739733737732/Seriously-I-39-m-Kidding-by-Ellen-DeGeneres.pdf
    • http://cefasfese.4pu.com/1739737738732736/Just-Kidding-by-Diane-Vallere.pdf
    • http://cefasfese.4pu.com/3730733739731735/Seriously-I-m-Kidding-by-Ellen-DeGeneres.pdf
    • http://cefasfese.4pu.com/2736731732735733/Seriously-I-m-Kidding-by-Ellen-DeGeneres.pdf
    • http://cefasfese.4pu.com/4737732730733732/Uganda-Be-Kidding-Me-by-Chelsea-Handler.pdf
    • http://cefasfese.4pu.com/3738736737731737/Kidding-Ourselves-The-Hidden-Power-of-Self-Deception-by-Joseph-T-Hallinan.pdf
    • http://cefasfese.4pu.com/6730739732731739/Kidding-Around-NYC-For-Kids-Who-Want-the-Inside-Track-on-the-City-by-Suzanne-Roche.pdf
    • http://cefasfese.4pu.com/3738739733731733/Andy-McBean-and-the-War-of-the-Worlds-The-Amazing-Adventures-of-Andy-McBean-1-by-Dale-Kutzera.pdf
    • http://cefasfese.4pu.com/4735731732/Superficial-More-Adventures-from-The-Andy-Cohen-Diaries-by-Andy-Cohen.pdf
    • http://cefasfese.4pu.com/1730738735731734730/Someone-Might-See-Us-Sex-in-Public-Are-You-Kidding-Five-Public-Sex-Erotica-Stories-by-Geena-Flix.pdf
    • http://cefasfese.4pu.com/8736735732731731/Medea-by-E-Griffiths.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.