Malicious PDF — malware analysis report

Static analysis result for SHA-256 19c60be5bc9eb7f4…

MALICIOUS

PDF

38.9 KB Created: 2019-05-03 23:39:33 +01:00 Authoring application: mPDF 5.7
MD5: ad438ae7b5d68e7de90105e20898dc08 SHA-1: 5c1e3639c52a47ec74f96289e373b99d46c1a874 SHA-256: 19c60be5bc9eb7f4fe4213a3aafc352230c24db352e24fe9b090b76489ca6dba
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 User Execution: Malicious File

The PDF file contains a large number of embedded external links, as indicated by the PDF_SEO_LINK_FARM heuristic. While many of these links were classified as benign, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or to distribute further malware. The ML_NYX_PDF_MALICIOUS classifier also flagged the document with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9665

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese
    • http://cefasfese.4pu.com/9734730736738731/Die-Deutsche-Arbeiterbewegung-Geschichte-Ziele-Wirkungen-by-Arno-Klonne.pdf
    • http://cefasfese.4pu.com/1731737736736734731/Kunstler-Im-Klassenkampf-Sonderausstellung-Des-Museums-Fur-Deutsche-Geschichte-April-Bis-Juni-1988-by-Museum-F-Ur-Deutsche-Geschichte.pdf
    • http://cefasfese.4pu.com/8739735738731733/Handbuch-der-Umweltver-nderungen-und-kotoxikologie-Band-2B-Terrestrische-kosysteme-Wirkungen-auf-Pflanzen-Diagnose-und-berwachung-Wirkungen-auf-Tiere-by-Robert-Guderian.pdf
    • http://cefasfese.4pu.com/1731737736737730730/Ziele-setzen-und-erreichen-Wie-Du-ohne-Anstrengung-Deine-Ziele-setzt-erreichst-und-verwirklichst-by-Marko-Polo.pdf
    • http://cefasfese.4pu.com/9739732735739733/Deutsche-Geschichte-in-Quellen-Und-Darstellung-by-Rainer-A-Muller.pdf
    • http://cefasfese.4pu.com/1730738739738738737/Die-Wartburg---Eine-Entdeckungsreise-in-Die-Deutsche-Geschichte-by-Gunther-Schuchardt.pdf
    • http://cefasfese.4pu.com/9738737736739730/Menschenskind---Ein-Sonderling-der-anderen-Art-Vollst-ndige-deutsche-Ausgabe-Die-turbulente-und-phantastische-Geschichte-von-Innozenz-Smith-by-G-K-Chesterton.pdf
    • http://cefasfese.4pu.com/1730731737736736731/Deutsche-Konigspfalzen-Band-7-Zentren-Herrschaftlicher-Reprasentation-Im-Hochmittelalter-Geschichte-Architektur-Und-Zeremoniell-by-J-rg-Jarnut.pdf
    • http://cefasfese.4pu.com/1730739736737732732/Nana-Die-Rougon-Macquart-Band-9---Vollst-ndige-deutsche-Ausgabe-Geschichte-des-Verfalls-der-Gesellschaft-durch-das-promiskuitive-Treiben-der-vornehmen-Gesellschaft-by-mile-Zola.pdf
    • http://cefasfese.4pu.com/9735730731731738/Gesammelte-Werke-Romane-Erz-hlungen-Essays-Vollst-ndige-deutsche-Ausgaben-Schau-heimw-rts-Engel-Von-Zeit-und-Strom-Die-Geschichte-eines-Romans-vier-verlornen-M-nner-by-Thomas-Wolfe.pdf
    • http://cefasfese.4pu.com/8738738735738731/Charles-Dickens-Weihnachtsgeschichten-Vollst-ndige-deutsche-Ausgabe-Die-sch-nsten-Weihnachtserz-hlungen-des-Bestsellerautors-von-Gro-e-Erwartungen-Geschichte-aus-zwei-St-dten-by-Charles-Dickens.pdf
    • http://cefasfese.4pu.com/8737736734737734/Die-Geschichte-von-den-drei-kleinen-M-usen-inklusive-Ausmalbilder-und-Cliparts-zum-Download-deutsche-Erstver-ffentlichung-The-Tale-of-the-Three-Little-Mice-Ausmalbuch-Malbuch-Cliparts-Icon-Emoji-Sticker-Peter-Hase-Kinder-Kinderbuch-Kla-by-Beatrix-Potter.pdf
    • http://cefasfese.4pu.com/9734730736738733/Verringerung-Der-Selbstkosten-in-Adjustagen-Und-Lagern-Von-Stabeisenwalzwerken-by-Theodor-Klonne.pdf
    • http://cefasfese.4pu.com/8738735734734739/Peter-Arno-s-Ladies-amp-Gentlemen-by-Peter-Arno.pdf
    • http://cefasfese.4pu.com/1730738738731736731/Zwischen-Unterdr-ckung-Und-Befriedung-Sozialist-Arbeiterbewegung-U-Autorit-res-Regime-In-sterreich-1933-1938-by-Everhard-Holtmann.pdf
    • http://cefasfese.4pu.com/8738738735731732/Geschichte-Hannover-Geschichte-Der-Stadt-Hannover-Geschichte-Der-Strassenbahn-in-Hannover-Liste-Abgegangener-Bauwerke-in-Hannover-by-Quelle-Wikipedia.pdf
    • http://cefasfese.4pu.com/1730730734735732736/Plan-F-r-Deutsche-Auswanderung-Und-Ansiedelung-Beziehungsweise-Einer-Reihe-Von-Ansiedelungen-in-Den-Vereinigten-Staaten-Von-Nordamerika-Auf-Ansuchen-Des-W-rttembergischen-Zweigvereins-Des-Nationalvereins-F-r-Deutsche-Auswanderung-Und-Ansiedelung-Zu-by-C-L-Fleischmann.pdf
    • http://cefasfese.4pu.com/6735731738738730/Die-Geschichte-Der-Elektrischen-Triebfahrzeuge-Band-1-Die-Geschichte-Der-Elektrolokomotive-by-Haut.pdf
    • http://cefasfese.4pu.com/1730735739731733735/Menschheits-Geschichte-Die-Geschichte-der-Menschheit-by-D-Selzer-McKenzie.pdf
    • http://cefasfese.4pu.com/1730735730738739736/Wirkungen-Des-Unbewussten-Denkens-in-Entscheidungssituationen-Und-Unbewusster-Prozesse-Von-Entscheidungen-by-Tobias-Halter.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.