Malicious PDF — malware analysis report

Static analysis result for SHA-256 13fbe1422a09c393…

MALICIOUS

PDF

15.8 KB Created: 2019-05-03 05:30:21 +01:00 Authoring application: mPDF 5.7
MD5: 1a37bb183cd2a0679365bbc9661b0199 SHA-1: b572bc77895e43c7e09d00aea7ab90b5051ba9e5 SHA-256: 13fbe1422a09c3931d895166b4f58bfeaf95ca6054d67420043e605e5f3ff617
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified as a link farm, which is a common tactic for SEO manipulation or distributing malicious content. While the URLs themselves are currently marked as benign, the sheer volume and the heuristic firing indicate a suspicious pattern. The document body is heavily obfuscated, preventing a clear understanding of its direct purpose beyond hosting these links.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9892

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/2734739732736733/Beauty-and-the-Beast-by-Deatri-King-Bey.pdf
    • http://cefasfese.4pu.com/2731731730734734/A-Tale-of-Beauty-and-Beast-A-Retelling-of-Beauty-and-the-Beast-Beyond-the-Four-Kingdoms-2-by-Melanie-Cellier.pdf
    • http://cefasfese.4pu.com/1730737730737736735/Beauty-amp-the-Beast-Vendetta-Beauty-amp-the-Beast-1-by-Nancy-Holder.pdf
    • http://cefasfese.4pu.com/2730734738739736/Beauty-and-the-Beast-Beauty-and-the-Beast-1-by-Barbara-Hambly.pdf
    • http://cefasfese.4pu.com/8737737731730/Beauty-A-Retelling-of-the-Story-of-Beauty-and-the-Beast-by-Robin-McKinley.pdf
    • http://cefasfese.4pu.com/3737730737739734/Hunted-An-Erotic-Retelling-of-Beauty-and-the-Beast-Hunted-by-the-Beast-1-5-by-Cerys-du-Lys.pdf
    • http://cefasfese.4pu.com/2730733731730730/Beauty-and-His-Beast-by-Bey-Deckard.pdf
    • http://cefasfese.4pu.com/2737736733732739/The-Beauty-of-a-Beast-by-starofjems.pdf
    • http://cefasfese.4pu.com/3734736739738739/Of-Beast-and-Beauty-by-Stacey-Jay.pdf
    • http://cefasfese.4pu.com/2737736737733738/Beauty-is-the-Beast-Vol-1-by-Tomo-Matsumoto.pdf
    • http://cefasfese.4pu.com/1739739737737736/Beauty-and-the-Beast-by-Teddy-Slater.pdf
    • http://cefasfese.4pu.com/4731736738734737/Beauty-and-the-Beast-by-Mahlon-F-Craft.pdf
    • http://cefasfese.4pu.com/3735732736735737/Beauty-s-Beast-by-Amanda-Ashley.pdf
    • http://cefasfese.4pu.com/4731737731735735/Beauty-and-the-Beast-by-Marianna-Mayer.pdf
    • http://cefasfese.4pu.com/2737736731737733/Beauty-and-the-Beast-by-Hannah-Howell.pdf
    • http://cefasfese.4pu.com/4734735733739733/Beauty-in-the-Beast-by-Christine-Danse.pdf
    • http://cefasfese.4pu.com/5736739733735733/Beauty-and-the-Beast-Not-Quite-the-Fairy-Tale-3-by-May-Sage.pdf
    • http://cefasfese.4pu.com/2730734733731732/Sleeping-Beauty-and-the-Beast-by-Melissa-Lemon.pdf
    • http://cefasfese.4pu.com/2737736733733738/How-Beauty-Met-the-Beast-Tales-of-the-Underlight-1-by-Jax-Garren.pdf
    • http://cefasfese.4pu.com/5734736730734735/Beauty-and-the-Beast-Once-Upon-a-Spell-1-by-Vivienne-Savage.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.