Malicious PDF — malware analysis report

Static analysis result for SHA-256 0f77d181d14e8484…

MALICIOUS

PDF

20.5 KB Created: 2020-03-21 09:37:54 +00:00 Authoring application: mPDF 5.7
MD5: ffcd7ac4238f78ad9936b87320c9ba5a SHA-1: da7b3376568dca662163c4d6ca91aeda7fd1dd0a SHA-256: 0f77d181d14e8484942abd72542864a5b1a43f700e52e8f1ca4477246eae58ed
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified as a link farm. These URLs point to external PDF files with titles suggesting mail-order bride themes, likely a lure for SEO spam or to distribute further malicious content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9922

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ieuicufioao.myhome.cx/2554556550556551/The-Mail-Order-Brides-of-Boot-Creek-Anthology-by-Carr-White.pdf
    • http://ieuicufioao.myhome.cx/7555551553552551/Mail-Order-Mary-Historical-Mail-Order-Bride-Novella-The-Belgrave-Brides-Agency-Book-3-by-Audrey-Yates.pdf
    • http://ieuicufioao.myhome.cx/8559553559555558/The-Christmas-Mail-Order-Bride-Holiday-Mail-Order-Brides-1-by-Kit-Morgan.pdf
    • http://ieuicufioao.myhome.cx/4552552552552556/Mail-Order-Rose-Mail-Order-Brides-1-by-Cara-Cabot.pdf
    • http://ieuicufioao.myhome.cx/7553554557554/Emma-Mail-Order-Brides-Club-1-by-Ashley-Merrick.pdf
    • http://ieuicufioao.myhome.cx/2550554552554559/Blackthorne-s-Bride-Mail-Order-Brides-4-by-Joan-Johnston.pdf
    • http://ieuicufioao.myhome.cx/9552559555555559/Mail-Order-Sweetheart-Boom-Town-Brides-3-by-Christine-Johnson.pdf
    • http://ieuicufioao.myhome.cx/3554554558550556/The-Cowboy-s-Mail-Order-Bride-Cowboys-amp-Brides-3-by-Carolyn-Brown.pdf
    • http://ieuicufioao.myhome.cx/5557557558558/Westward-Winds-Montana-Mail-Order-Brides-1-by-Linda-Bridey.pdf
    • http://ieuicufioao.myhome.cx/8559554551551550/Shane-s-Bride-Mail-Order-Brides-of-Texas-3-by-Kathleen-Ball.pdf
    • http://ieuicufioao.myhome.cx/4556556556556551/Texas-Mail-Order-Bride-Bachelors-of-Battle-Creek-1-by-Linda-Broday.pdf
    • http://ieuicufioao.myhome.cx/2550558552552551/The-Marine-s-E-Mail-Order-Bride-The-Heroes-of-Chance-Creek-3-by-Cora-Seton.pdf
    • http://ieuicufioao.myhome.cx/2550550554553550/Mail-Order-Marriages-Brides-For-Brothers-The-Marriage-Risk-by-Debbie-Macomber.pdf
    • http://ieuicufioao.myhome.cx/5554550556559559/The-Chef-s-Mail-Order-Bride-Wild-West-Frontier-Brides-1-by-Cindy-Caldwell.pdf
    • http://ieuicufioao.myhome.cx/9558558558559551/Big-Beautiful-Bride-For-The-Reluctant-Preacher-Colorado-Wildnerness-Mail-Order-Brides-1-by-Rosie-Attwood.pdf
    • http://ieuicufioao.myhome.cx/6558558553556556/Echo-Bayou-Springs-Alien-Mail-Order-Brides-3-Intergalactic-Dating-Agency-19-by-Kenzie-Cox.pdf
    • http://ieuicufioao.myhome.cx/1559555550558551/Trinity-Bride-of-West-Virginia-The-American-Mail-Order-Bride-35-by-Carr-White.pdf
    • http://ieuicufioao.myhome.cx/8554554550554550/Traita-c-de-Peintures-Vitrifiables-Sur-Porcelaine-Dure-Et-Porcelaine-Tendre-Sur-A-c-Mail-A-c-Mail-Genre-Limoges-A-c-Mail-or-Grava-c-Faaence-Grand-Feu-Sur-A-c-Mail-Et-Sous-A-c-Mail-by-Delphine-De-Cool.pdf
    • http://ieuicufioao.myhome.cx/3550557551550559/The-Mail-Order-Bride-by-Diana-Bold.pdf
    • http://ieuicufioao.myhome.cx/8553550556553558/Mail-Order-Regrets-by-Julianna-Blake.pdf