Malicious PDF — malware analysis report

Static analysis result for SHA-256 0f03d3afe7457a37…

MALICIOUS

PDF

14.0 KB Created: 2019-11-07 22:14:44 +00:00 Authoring application: mPDF 5.7
MD5: 729bf816a0a6efc0c290624f8634e94e SHA-1: 0dfe19a7086b343e43c871a2b306d82db3234e68 SHA-256: 0f03d3afe7457a37d97964f0f48f250ccc5a94bc324eedc0f4f7abba4da63400
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document was flagged by a machine learning classifier as malicious and contains a large number of embedded external links. These links, predominantly pointing to PDF files with numeric slugs, suggest a link farm or SEO manipulation tactic. While the URLs themselves are currently classified as benign, the sheer volume and the heuristic firing indicate a malicious intent to potentially redirect users to harmful content or engage in deceptive practices.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9798

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/3736736736730734/Tokyo-Mew-Mew-Vol-4-Tokyo-Mew-Mew-4-by-Mia-Ikumi.pdf
    • http://cefasfese.4pu.com/3736736736730735/Tokyo-Mew-Mew-Vol-5-Tokyo-Mew-Mew-5-by-Mia-Ikumi.pdf
    • http://cefasfese.4pu.com/4733730733738731/The-Tokyo-Zodiac-Murders---Pembunuhan-Zodiak-Tokyo-by-Soji-Shimada.pdf
    • http://cefasfese.4pu.com/9730730737735/Tokyo-Ghoul-Collection-7-Book-Set-Tokyo-Ghoul-1-7-by-Sui-Ishida.pdf
    • http://cefasfese.4pu.com/4736735731734732/Tokyo-Ghoul-Vol-12-Tokyo-Ghoul-12-by-Sui-Ishida.pdf
    • http://cefasfese.4pu.com/4738736730736730/Tokyo-Ghoul-Vol-1-Tokyo-Ghoul-1-by-Sui-Ishida.pdf
    • http://cefasfese.4pu.com/3738734738736736/Tokyo-Babylon-Vol-3-by-CLAMP.pdf
    • http://cefasfese.4pu.com/1731733737734732738/Tokyo-Babylon-Vol-7-by-CLAMP.pdf
    • http://cefasfese.4pu.com/1731733737733739733/Tokyo-Babylon-Vol-5-by-CLAMP.pdf
    • http://cefasfese.4pu.com/2737736737732737/Tokyo-Babylon-Vol-1-by-CLAMP.pdf
    • http://cefasfese.4pu.com/7738735734730733/Yugo-in-Tokyo-Tanegashima-by-Shu-Akana.pdf
    • http://cefasfese.4pu.com/2734731733737731/Thirty-Seconds-Over-Tokyo-by-Ted-W-Lawson.pdf
    • http://cefasfese.4pu.com/4730737733736736/Lost-in-Tokyo-by-Jenny-Lynne.pdf
    • http://cefasfese.4pu.com/4734732739738739/Tokyo-Is-My-Garden-by-Beno-t-Peeters.pdf
    • http://cefasfese.4pu.com/1730733730732736733/Tokyo-ESP-11-Kapitel-46-50-by-Hajime-Segawa.pdf
    • http://cefasfese.4pu.com/9736735735734735/Tokyo-Encounter-by-Wendy-Yanagihara.pdf
    • http://cefasfese.4pu.com/4735737731739730/Nightshade-Only-In-Tokyo-Mystery-1-by-Jonelle-Patrick.pdf
    • http://cefasfese.4pu.com/2738735734732738/Tune-in-Tokyo-The-Gaijin-Diaries-by-Tim-Anderson.pdf
    • http://cefasfese.4pu.com/1735736738730734/Tokyo-Doesn-t-Love-Us-Anymore-by-Ray-Loriga.pdf
    • http://cefasfese.4pu.com/1731737738733731738/Tokyo-Ghoul---Band-3-Der-Tag-an-dem-ich-starb-by-Sui-Ishida.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.