Malicious PDF — malware analysis report

Static analysis result for SHA-256 0853b826a07df1a2…

MALICIOUS

PDF

19.3 KB Created: 2020-02-06 01:14:43 +00:00 Authoring application: mPDF 5.7 First seen: 2021-01-23
MD5: b8d269982a6d45b43f58a8efea0def5b SHA-1: b880e798008f3329412732321013072597453694 SHA-256: 0853b826a07df1a29e7524dea08edc3355c79b626cdc17f8ef9d6f47f1ec5559
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://owlaokopdf.myhome.cx/481638163816181638166/The-Bride-Star-Civil-War-Brides-Book-6-by-Tracey-Jane-Jackson.pdf In PDF document text
    • http://owlaokopdf.myhome.cx/481638163816181638163/The-Bride-Spy-Civil-War-Brides-3-by-Tracey-Jane-Jackson.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/181688163816881638165/The-Bride-Price-Civil-War-Brides-1-by-Tracey-Jane-Jackson.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/481638163816181638167/The-Bride-Pursued-Civil-War-Brides-Book-7-by-Piper-Davenport.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/481638163816181648164/Bound-by-Dreams-Cauld-Ane-Series-Book-5-by-Tracey-Jane-Jackson.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/381628168816481668162/Bound-by-Song-Cauld-Ane-4-by-Tracey-Jane-Jackson.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/181688164816581628160/Bound-by-Blood-Cauld-Ane-1-by-Tracey-Jane-Jackson.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/181678164816781608169/Bride-s-Holiday-Gift-Star-Brides-3-by-Solange-Ayre.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/281608164816381688168/The-Bad-Luck-Bride-The-Brides-of-St-Ives-1-by-Jane-Goodger.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/48168816981678169/The-Brides-Trilogy-A-3-In-1-Edition-Including-The-Sherbrooke-Bride-The-Hellion-Bride-And-The-Heiress-Bride-by-Catherine-Coulter.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/1816181688161816881668160/Wild-Heart-Dartmoor-Big-Cat-Brides-Book-1-by-Freya-Jackson.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/381618167816081608162/The-Counterfeit-Bride-Borrowed-Brides-Book-4-by-Rebecca-Hagan-Lee.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/181678164816681608163/One-Thousand-Brides-Star-Brides-1-by-Solange-Ayre.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/181678164816781648161/Captive-Brides-Star-Brides-1-2-by-Solange-Ayre.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/681668161816681668165/Star-Wars-Chevaliers-de-l-ancienne-r-publique-T02-Ultime-recours-Star-Wars-Knights-of-the-Old-Republic-2-by-John-Jackson-Miller.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/681668161816581698163/Star-Wars-Chevaliers-de-l-ancienne-r-publique-T01-Il-y-a-bien-longtemps-Star-Wars-Knights-of-the-Old-Republic-1-by-John-Jackson-Miller.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/681668161816681688166/Star-Wars-Chevaliers-de-l-ancienne-r-publique-T05-Sans-piti-Star-Wars-Knights-of-the-Old-Republic-6-by-John-Jackson-Miller.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/581608160816881608162/Stonewall-Jackson-and-the-American-Civil-War-by-G-F-R-Henderson.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/381698165816881678160/The-Bride-Says-No-The-Brides-of-Wishmore-1-by-Cathy-Maxwell.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/181628160816581678166/The-Scottish-Bride-Brides-6-by-Catherine-Coulter.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.