PDF malware analysis — malicious · 078aa90b869dc445

MALICIOUS

PDF

48.0 KB Created: 2020-12-13 22:10:47 +02:00 Authoring application: wkhtmltopdf 0.12.5 (via Qt 4.8.7)

MD5: f6c82baf4c5b4509bd13a582fcaef967 SHA-1: cc3457105ffed771456822997acf882dd4d369cf SHA-256: 078aa90b869dc445107c7724837d68866a23e50dde929196ccc816f881e8e96b

94 Risk Score

Malware Insights

MITRE ATT&CK

T1566.001 Spearphishing Attachment

The PDF file was flagged as malicious by ML classifiers and ClamAV, indicating a high likelihood of malicious intent. It contains an embedded URI pointing to a suspicious domain, likely intended to host a phishing page or download a second-stage payload. The document body, though partially corrupted, suggests a lure related to a movie theatre, aligning with common social engineering tactics.

Machine Learning

Nyx PDF Classifier malicious score 0.9617

Heuristics 3

ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
External URI info PDF_URI

PDF contains an external URL action
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL https://traffnew.ru/strik?utm_term=marcus+movie+theatre+oakdale+mn
- https://cdn-cms.f-static.net/uploads/4414357/normal_5f9ba9089a239.pdf
- https://cdn-cms.f-static.net/uploads/4374540/normal_5fa84c98bbaf6.pdf
- https://static.s123-cdn-static.com/uploads/4379959/normal_5fc99fb242822.pdf
- https://watorixaziju.weebly.com/uploads/1/3/4/5/134586039/lerajebobijoxos.pdf
- https://static1.squarespace.com/static/5fc51e66c14dfd36fe0cdc92/t/5fc96af956e7c50656c0139b/1607035642547/hockey_stick_length_without_skates.pdf
- https://static1.squarespace.com/static/5fc4d10ee2fce462bca5020a/t/5fc50993e6d49a06bb31774a/1606748563450/how_to_run_c_sharp_code_in_terminal.pdf
- https://uploads.strikinglycdn.com/files/d63c9b9c-bde9-442b-a110-1d671183107c/74534591083.pdf
- https://static1.squarespace.com/static/5fc0028ac14dfd36feec75cc/t/5fcad6b2a51c5a14019cf750/1607128756256/monday_night_football_touchdown_dance.pdf
- https://static1.squarespace.com/static/5fc2ccee5687f52b6b8d7e2d/t/5fc4cf9b4f98375720767975/1606733728579/cse_107_ucsc.pdf
- https://static1.squarespace.com/static/5fbfd1e0c89e1c4b8fb81223/t/5fc299625147b14804879fb0/1606588770591/zoo_tycoon_abcgames.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.