Malicious PDF — malware analysis report

Static analysis result for SHA-256 06bc504ae234f203…

MALICIOUS

PDF

15.9 KB Created: 2019-04-30 04:40:59 +01:00 Authoring application: mPDF 5.7
MD5: aeb000d0bb287d7d922a8366ef5c1015 SHA-1: 6340077476c577ac5fb84c02e75a7a4ff91cf26c SHA-256: 06bc504ae234f203b9092fca73007dddcd6dab872acf840c62cd92e742b77c03
100 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO manipulation or to distribute malicious content. While the document body is unreadable, the PDF_SEO_LINK_FARM heuristic and the ML classifier strongly indicate malicious intent. The embedded links are likely intended to redirect users to potentially harmful content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9800

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/7a01a04a08a08/The-Songcatcher-by-Sharyn-McCrumb.pdf
    • http://muicuiu.dumb1.com/2a08a01a02a04a00/Once-Around-the-Track-St-Dale-2-by-Sharyn-McCrumb.pdf
    • http://muicuiu.dumb1.com/2a02a00a00a02a04/King-s-Mountain-Ballad-10-by-Sharyn-McCrumb.pdf
    • http://muicuiu.dumb1.com/4a08a08a00a04a06/Prayers-the-Devil-Answers-by-Sharyn-McCrumb.pdf
    • http://muicuiu.dumb1.com/4a05a01a07a09a08/The-Devil-Amongst-the-Lawyers-A-Ballad-Novel-by-Sharyn-McCrumb.pdf
    • http://muicuiu.dumb1.com/2a06a00a01a00a09/Missing-Susan-Elizabeth-MacPherson-6-by-Sharyn-McCrumb.pdf
    • http://muicuiu.dumb1.com/2a07a02a03a03/If-Ever-I-Return-Pretty-Peggy-O-Ballad-1-by-Sharyn-McCrumb.pdf
    • http://muicuiu.dumb1.com/3a03a01a07a05a08/The-Windsor-Knot-Elizabeth-MacPherson-5-by-Sharyn-McCrumb.pdf
    • http://muicuiu.dumb1.com/9a01a01a00a01/Sick-of-Shadows-Elizabeth-MacPherson-1-by-Sharyn-McCrumb.pdf
    • http://muicuiu.dumb1.com/4a05a05a03a05a01/Happiness-Is-a-Dead-Poet-amp-Other-Stories-From-Foggy-Mountain-Breakdown-by-Sharyn-McCrumb.pdf
    • http://muicuiu.dumb1.com/3a07a02a02a08a08/The-Unquiet-Grave-Damen-Brook-4-by-Steven-Dunne.pdf
    • http://muicuiu.dumb1.com/3a03a00a08a09a05/St-Dale-St-Dale-1-by-Sharyn-McCrumb.pdf
    • http://muicuiu.dumb1.com/9a02a02a06a00/Grave-Beginnings-The-Grave-Report-1-by-R-R-Virdi.pdf
    • http://muicuiu.dumb1.com/1a01a09a05a02a08/Grave-Robber-for-Hire-Grave-Robber-Series-1-by-Cassandra-L-Shaw.pdf
    • http://muicuiu.dumb1.com/5a08a03a01a08a04/I-Forgot-To-Take-My-Pill-An-Honest-Diary-Of-A-First-time-Mum-by-Sharyn-Hayden.pdf
    • http://muicuiu.dumb1.com/3a03a02a01a07a05/The-Unquiet-Heart-Danny-McRae-2-by-Gordon-Ferris.pdf
    • http://muicuiu.dumb1.com/4a04a06a08a08a07/Unquiet-Slumber-Blue-Fire-1-by-Paulette-Miller.pdf
    • http://muicuiu.dumb1.com/8a02a03a03a05a02/Edward-Lansdale-The-Unquiet-American-by-Cecil-B-Currey.pdf
    • http://muicuiu.dumb1.com/4a06a03a05a00a08/The-Ordinary-Woman-and-the-Unquiet-Emperor-by-Catherynne-M-Valente.pdf
    • http://muicuiu.dumb1.com/1a08a04a09a04a03/Echoes-of-Silence-Unquiet-Mind-1-by-Anne-Malcom.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.