Malicious PDF — malware analysis report

Static analysis result for SHA-256 0642e8b0c3a91ae8…

MALICIOUS

PDF

15.7 KB Created: 2019-04-30 02:18:27 +01:00 Authoring application: mPDF 5.7
MD5: b7aac927d9817a5ecacb15dbebc8f35b SHA-1: 80bbcc199b3a08664dda7b0980dd0b8b5ac03f09 SHA-256: 0642e8b0c3a91ae885d8c72373d3773b065138bc6a65c7a36c2e3ec58487b5da
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. These links point to various book titles, suggesting a potential attempt to drive traffic or distribute malicious content disguised as legitimate downloads. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9880

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/1200202203202202202/The-Maltese-Falcon-And-Other-Sam-Spade-Stories-The-Ultimate-Dashiell-Hammett-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208206203200200/The-Assistant-Murderer-and-Other-Stories-by-Dashiell-Hammett-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208206203200203/Hammett-s-Moral-Vision-The-Most-Influential-In-Depth-Analysis-of-Dashiell-Hammett-s-Novels-Red-Harvest-The-Dain-Curse-The-Maltese-Falcon-The-Glass-Key-and-The-Thin-Man-by-George-J-Thompson.pdf
    • http://xiixmcuin.linkpc.net/8208205209208207/Hammett-Homicides-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/2204200205203208/The-Glass-Key-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/4201200201200207/The-Glass-Key-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/7209201207209/The-Continental-Op-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/4200202205206209/The-Thin-Man-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/4206207207208/The-Glass-Key-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208206201205202/The-Red-Brain-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208206200204200/The-Tenth-Clew-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208205209202200/Return-of-the-Thin-Man-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/1208206203204209/Secret-Agent-X-9-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208206200203209/The-Return-of-the-Continental-Op-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/1200202208205200206/El-halc-n-malt-s-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/1206206208203209/Woman-in-the-Dark-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/6208201204205207/Zigzags-of-Treachery-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/8208205209202201/Dashiell-Hammett-A-Life-by-Diane-Johnson.pdf
    • http://xiixmcuin.linkpc.net/8208206202209209/The-Giant-Collection-of-the-Continental-Op-by-Dashiell-Hammett.pdf
    • http://xiixmcuin.linkpc.net/6209208202202/The-Maltese-Falcon-The-Thin-Man-Red-Harvest-by-Dashiell-Hammett.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.