Malicious PDF — malware analysis report

Static analysis result for SHA-256 18de050a5374d697…

MALICIOUS

PDF

15.3 KB Created: 2019-11-07 22:57:15 +00:00 Authoring application: mPDF 5.7
MD5: 0502ad08922be2a5c97fb777b672b631 SHA-1: 4e50f4469a2efdad856aa5bcf1e3f6b6cb794b13 SHA-256: 18de050a5374d69758e3f0803f94d5f310c7dc4359f98a07fcb213c8516313e9
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded links to external PDF files, identified as a link farm. The ML classifier also flagged this document as malicious. The primary attack pattern observed is the distribution of a large number of links, likely intended to drive traffic or distribute further malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9778

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/8738736737736731/Flotter-Dreier-in-der-Tanzschule-Scharfer-Sex-zu-dritt-4-by-Anna-Fillinger.pdf
    • http://cefasfese.4pu.com/8738736736736730/-K-ein-flotter-Dreier-Liebesroman-by-Anna-Graf.pdf
    • http://cefasfese.4pu.com/8738736736736736/M-nage-trois---ein-flotter-Dreier-by-Sophia-Maywald.pdf
    • http://cefasfese.4pu.com/8738736736736732/Flotter-Dreier-mit-meinen-Stiefschwestern-by-Mary-Bischoff.pdf
    • http://cefasfese.4pu.com/1730736738730733734/Wilder-Dreier-mit-der-besten-Freundin-Dreier-First-Time-by-Anna-Sto-.pdf
    • http://cefasfese.4pu.com/8738736737735738/-quot-Lesbisch-Flotter-Dreier-Sexbilder-Strip-Nackt-Und-Unzensiert-F-r-Dich-by-Marta-Huber.pdf
    • http://cefasfese.4pu.com/8738736737734737/Flotter-Dreier-Bilder-Xxx-Sexy-Bilder-Und-Erotische-Fotos-by-Dirk-Koller.pdf
    • http://cefasfese.4pu.com/1730735731730730739/Abw-rts---tabulos-im-Fahrstuhl-Sex-mit-Fremden-2-by-Anna-Fillinger.pdf
    • http://cefasfese.4pu.com/9738734730730732/Huren-Einf-hrung-f-r-Rosi-Dreier-by-Anna-Sto-.pdf
    • http://cefasfese.4pu.com/1730736737739738732/Vier-geile-Dreier-4-hei-e-Dreier-Storys-by-Bernadette-Binkowski.pdf
    • http://cefasfese.4pu.com/1730736737739737739/Zum-Dreier-verf-hrt-Hei-e-Dreier-Erotik-by-Bernadette-Binkowski.pdf
    • http://cefasfese.4pu.com/1737735733739732/Iron-Inheritance-The-Blood-Artifacts-1-by-G-R-Fillinger.pdf
    • http://cefasfese.4pu.com/1730736737739738733/Take-Your-Life-Off-Hold-by-Ted-Dreier.pdf
    • http://cefasfese.4pu.com/1730736738730735731/Der-Tod-dreier-M-nner-by-Carlo-Sch-fer.pdf
    • http://cefasfese.4pu.com/1730736737739739738/Forces-And-Motion-by-David-Dreier.pdf
    • http://cefasfese.4pu.com/1730736738730734738/Mein-erster-Dreier-Sexgeschichte-by-Jesse-Wonder.pdf
    • http://cefasfese.4pu.com/1730736738730734732/Flotte-Dreier-Band-I-by-Chesney-York.pdf
    • http://cefasfese.4pu.com/1730736738730730730/Wilder-Dreier-Erotik-f-r-Frauen-by-Vicky-Carlton.pdf
    • http://cefasfese.4pu.com/8737735736734737/Hei-er-Dreier-mit-dem-doppelten-Lottchen-by-Lola-Hammerfeld.pdf
    • http://cefasfese.4pu.com/1731734734732732731/Von-zwei-M-nnern-gefistet-Scharfe-Dreier-Story-by-Bernadette-Binkowski.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.