Malicious PDF — malware analysis report

Static analysis result for SHA-256 10b1d23e86372491…

MALICIOUS

PDF

18.0 KB Created: 2020-03-15 01:07:42 +00:00 Authoring application: mPDF 5.7
MD5: 3f622a1b1993adb843a69c4e438c6973 SHA-1: 634642229ccd6e10e9e5d85ec4f9fb49d2ed4704 SHA-256: 10b1d23e86372491aaed6b5dbfd2aa18e927a0a072a6a1bf41f238b839046c6e
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to external PDF files, indicating a link farm or a distribution mechanism for further malicious content. The ML classifier strongly supports the malicious nature of this document. No scripts were extracted, and the document body was unreadable.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://lwoscmobook.myhome.cx/1524152425242524452485245/Tripped-Out-Blacktop-Cowboys-8-5-1001-Dark-Nights-66-by-Lorelei-James.pdf
    • http://lwoscmobook.myhome.cx/75247524252405248/Corralled-Blacktop-Cowboys-1-by-Lorelei-James.pdf
    • http://lwoscmobook.myhome.cx/352445244524652435246/Saddled-and-Spurred-Blacktop-Cowboys-2-by-Lorelei-James.pdf
    • http://lwoscmobook.myhome.cx/252425240524852485241/Turn-and-Burn-Blacktop-Cowboys-5-by-Lorelei-James.pdf
    • http://lwoscmobook.myhome.cx/452465245524752485248/Racked-and-Stacked-Blacktop-Cowboys-9-by-Lorelei-James.pdf
    • http://lwoscmobook.myhome.cx/352445248524552445245/Wrapped-and-Strapped-Blacktop-Cowboys-7-by-Lorelei-James.pdf
    • http://lwoscmobook.myhome.cx/452415247524452495243/Caress-of-Darkness-Dark-Pleasures-0-5-1001-Dark-Nights-12-by-Julie-Kenner.pdf
    • http://lwoscmobook.myhome.cx/452485247524452465249/Tangled-Dark-Protectors-7-8-1001-Dark-Nights-58-by-Rebecca-Zanetti.pdf
    • http://lwoscmobook.myhome.cx/452415245524552475246/Sweet-Rivalry-1001-Dark-Nights-54-by-K-Bromberg.pdf
    • http://lwoscmobook.myhome.cx/952465241524052405245/1001-Dark-Nights-Bundle-One-by-Shayla-Black.pdf
    • http://lwoscmobook.myhome.cx/752465249524152475243/The-Bed-Mate-Roommates-3-5-1001-Dark-Nights-71-by-Kendall-Ryan.pdf
    • http://lwoscmobook.myhome.cx/252495244524252455247/Tempting-Brooke-Big-Sky-2-5-1001-Dark-Nights-90-by-Kristen-Proby.pdf
    • http://lwoscmobook.myhome.cx/452495242524752435243/The-Prince-A-Wicked-Trilogy-3-5-1001-Dark-Nights-85-by-Jennifer-L-Armentrout.pdf
    • http://lwoscmobook.myhome.cx/6524952445249/Dirty-Filthy-Fix-Fixed-5-5-1001-Dark-Nights-72-by-Laurelin-Paige.pdf
    • http://lwoscmobook.myhome.cx/952425246524152455247/Kayden-Simon-Bayou-Heat-21-22-1001-Dark-Nights-45-by-Alexandra-Ivy.pdf
    • http://lwoscmobook.myhome.cx/1524052475240524852485245/Hallow-Be-the-Haunt-Krewe-of-Hunters-22-5-1001-Dark-Nights-69-by-Heather-Graham.pdf
    • http://lwoscmobook.myhome.cx/352425247524152455242/Rough-Rhythm-Made-in-Jersey-1-5-1001-Dark-Nights-37-by-Tessa-Bailey.pdf
    • http://lwoscmobook.myhome.cx/252405242524152495248/Ride-Dirty-Raven-Riders-3-5-1001-Dark-Nights-78-by-Laura-Kaye.pdf
    • http://lwoscmobook.myhome.cx/352455246524752465248/Pure-Wicked-Wicked-Lovers-9-5-1001-Dark-Nights-25-by-Shayla-Black.pdf
    • http://lwoscmobook.myhome.cx/252405242524352405240/Hard-as-Steel-Hard-Ink-4-5-Raven-Riders-0-5-1001-Dark-Nights-26-by-Laura-Kaye.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.