Malicious PDF — malware analysis report

Static analysis result for SHA-256 05b2de0195f034e6…

MALICIOUS

PDF

21.5 KB Created: 2020-03-18 21:15:05 +00:00 Authoring application: mPDF 5.7
MD5: cc79f98747c03da07b50a83ce6c2b4b2 SHA-1: f63c711e9f419cdfddd567df7f97b7eb651a919d SHA-256: 05b2de0195f034e6b5aa0629f3c27f880dc89fa005e2101e59623e73f9933d38
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded links, as indicated by the 'PDF_SEO_LINK_FARM' heuristic. These links, such as 'http://easckaolp.myhome.cx/7843846842847845/Panthers-Moon-by-Victor-Canning.pdf', likely lead to malicious websites or downloads. The ML classifier also flagged this PDF as malicious with high confidence. No scripts were extracted, but the presence of numerous external links suggests a phishing or content-luring attack vector.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://easckaolp.myhome.cx/7843846842847845/Panthers-Moon-by-Victor-Canning.pdf
    • http://easckaolp.myhome.cx/3843846844840840/The-Python-Project-Victor-Canning-by-Victor-Canning.pdf
    • http://easckaolp.myhome.cx/6847845840847842/The-Doomsday-Carrier-by-Victor-Canning.pdf
    • http://easckaolp.myhome.cx/7845840842844/The-Crimson-Chalice-by-Victor-Canning.pdf
    • http://easckaolp.myhome.cx/1840846846848847840/Black-Flamingo-by-Victor-Canning.pdf
    • http://easckaolp.myhome.cx/4842840846845842/Flight-of-the-Grey-Goose-Smiler-Trilogy-2-Bello-The-Runaways-Trilogy-by-Victor-Canning.pdf
    • http://easckaolp.myhome.cx/3841841841845844/Canning-and-Preserving-Book-Bundle-The-Best-Of-The-Essential-Kitchen-Series-Canning-and-Preserving-Books-Over-100-Recipes-To-Put-Get-the-Most-Out-Of-Your-Meals-by-Sarah-Sophia.pdf
    • http://easckaolp.myhome.cx/3841841841844840/Canning-amp-Preserving-Meats-The-Essential-How-To-Guide-On-Canning-and-Preserving-Meat-With-30-Delicious-Quick-and-Simple-Recipes-The-Essential-Kitchen-Series-Book-51-by-Sarah-Sophia.pdf
    • http://easckaolp.myhome.cx/3841841841842849/Canning-amp-Preserving-Poultry-The-Essential-How-To-Guide-on-Canning-and-Preserving-Poultry-with-30-Finger-Licking-Good-Recipes-The-Essential-Kitchen-Series-Book-50-by-Sarah-Sophia.pdf
    • http://easckaolp.myhome.cx/3840849846847847/Canning-amp-Preserving-Fruit-The-Essential-How-To-Guide-on-Canning-and-Preserving-Your-Fruit-With-30-Delicious-and-Fun-Recipes-The-Essential-Kitchen-Series-Book-40-by-Sarah-Sophia.pdf
    • http://easckaolp.myhome.cx/8846843840840844/Panthers-in-the-Hole-by-Bruno-Cenou.pdf
    • http://easckaolp.myhome.cx/1848845849846849/Dalit-Panthers-An-Authoritative-History-by-J-V-Pawar.pdf
    • http://easckaolp.myhome.cx/2840846841849844/Panthers-Pleasure-Impulse-1-by-Zara-Chase.pdf
    • http://easckaolp.myhome.cx/3840844847847843/Alpha-Panthers-Terra-Form-1-by-Becca-Van.pdf
    • http://easckaolp.myhome.cx/1840844849842849/The-Black-Panthers-Speak-by-Philip-S-Foner.pdf
    • http://easckaolp.myhome.cx/8848849842849840/Victor-Hugo---Die-Elenden-Les-Mis-rables-Gesamtausgabe-Band-1-bis-5-in-ungek-rzter-deutscher-Fassung-by-Victor-Hugo.pdf
    • http://easckaolp.myhome.cx/3843844843844848/Gray-Panthers-Battle-for-Earth-by-David-Guenther.pdf
    • http://easckaolp.myhome.cx/1846845843843847/The-Lesser-Evil-The-Diaries-of-Victor-Klemperer-1945-1959-by-Victor-Klemperer.pdf
    • http://easckaolp.myhome.cx/1841847849843841845/E-M-Forster-by-Richard-Canning.pdf
    • http://easckaolp.myhome.cx/2846840849849840/Rescue-471-A-Paramedic-s-Stories-by-Peter-Canning.pdf