Malicious PDF — malware analysis report

Static analysis result for SHA-256 13b4c2b202ce5f22…

MALICIOUS

PDF

18.3 KB Created: 2019-04-30 04:50:08 +01:00 Authoring application: mPDF 5.7
MD5: 406938714842486b0f8c84c65e6edc1b SHA-1: 44a39e824f214043748e032e5d31bb056a02f0bb SHA-256: 13b4c2b202ce5f221784ec949a6f8e0319444ac16572e9bd6bbc12bf8c5aaecf
100 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, identified by the PDF_SEO_LINK_FARM heuristic. While the document body is heavily obfuscated, the presence of numerous links suggests a link farm or SEO manipulation tactic. The ML classifier also flagged the document as malicious with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a01a07a02a01a08/Far-amp-Sure-For-Golf-and-Country-by-Zaid-Ibrahim.pdf
    • http://muicuiu.dumb1.com/1a01a09a07a05a03a02/In-Good-Faith-by-Zaid-Ibrahim.pdf
    • http://muicuiu.dumb1.com/3a01a04a03a03a05/Quantum-Golf-The-Path-to-Golf-Mastery-by-Kjell-Enhager.pdf
    • http://muicuiu.dumb1.com/1a04a01a04a02a05/The-Seven-Principles-of-Golf-Mastering-the-Mental-Game-on-and-Off-the-Golf-Course-by-Darrin-Gee.pdf
    • http://muicuiu.dumb1.com/7a09a04a00a01a08/GOLF-The-Best-Instruction-Book-Ever-by-Golf-Magazine.pdf
    • http://muicuiu.dumb1.com/1a01a09a07a04a08a00/The-Selected-Poetry-of-Gabriel-Zaid-by-Gabriel-Zaid.pdf
    • http://muicuiu.dumb1.com/7a09a04a00a01a02/The-Golf-Rules-Learn-the-Rules-of-Golf-by-Watching-Others-Break-Them-by-Richard-E-Todd.pdf
    • http://muicuiu.dumb1.com/1a06a01a06a04a05/Alice-Cooper-Golf-Monster-A-Rock-n-Roller-s-12-Steps-to-Becoming-a-Golf-Addict-by-Alice-Cooper.pdf
    • http://muicuiu.dumb1.com/6a09a08a02a00a04/Country-Living-Country-Chic-Country-Style-for-Modern-Living-by-Liz-Bauwens.pdf
    • http://muicuiu.dumb1.com/1a01a09a07a05a02a07/Reloj-De-Sol-by-Gabriel-Zaid.pdf
    • http://muicuiu.dumb1.com/1a01a09a07a06a09a06/Aquapocalypse-by-Blaine-T-Zaid.pdf
    • http://muicuiu.dumb1.com/7a09a09a04a03a03/The-Country-Writer-s-Craft-Writing-for-Country-Regional-and-Rural-Publications-by-Suzanne-Ruthven.pdf
    • http://muicuiu.dumb1.com/1a01a09a07a07a00a01/Trinity-The-Metamorphosis-of-Myth-by-Omar-Zaid.pdf
    • http://muicuiu.dumb1.com/1a01a09a07a05a03a08/Zaid-and-the-Gigantic-Cloud-by-Helal-Musleh.pdf
    • http://muicuiu.dumb1.com/8a06a05a05a06a06/Modern-Country-A-New-Approach-To-Country-Style-by-Mary-Norden.pdf
    • http://muicuiu.dumb1.com/1a01a09a07a06a08a09/Islam-in-the-Shadow-of-the-New-World-Order-by-Omar-Zaid.pdf
    • http://muicuiu.dumb1.com/1a01a09a07a06a06a09/Zoha-et-Zaid-R-volutions-oubli-es-by-Depal-Stermans.pdf
    • http://muicuiu.dumb1.com/1a04a06a09a07a04/A-Taste-Of-Country-Country-Love-2-by-Vicki-Green.pdf
    • http://muicuiu.dumb1.com/4a03a03a06a02/Fire-Country-The-Country-Saga-1-by-David-Estes.pdf
    • http://muicuiu.dumb1.com/6a00a08a05a08a09/In-The-Middle-Of-Nowhere-by-Ibrahim-Yared.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.