Malicious PDF — malware analysis report

Static analysis result for SHA-256 1aafb969597260b8…

MALICIOUS

PDF

24.8 KB Created: 2019-05-01 08:49:06 +01:00 Authoring application: mPDF 5.7
MD5: dc35963f86378d6e27ab506e70b1450c SHA-1: cf7dba68c24b9776c6bbf9acc0345b4254c7d322 SHA-256: 1aafb969597260b86c91c59566bc60995301a17af269ae176651e2a0d4e6b320
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, which is indicative of a link farm or redirection tactic. While the specific URLs appear to point to book titles, the sheer volume and the heuristic firing suggest a malicious intent to drive traffic to potentially compromised or malicious sites. The ML classifier also strongly supports a malicious verdict.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9742

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://seasasac.lflinkup.com/4da4da4da7da7da6/The-Buccaneer-s-Apprentice-The-Cassaforte-Chronicles-2-by-V-Briceland.pdf
    • http://seasasac.lflinkup.com/2da2da2da0da1da8/The-Nascenza-Conspiracy-The-Cassaforte-Chronicles-3-by-V-Briceland.pdf
    • http://seasasac.lflinkup.com/5da5da0da2da1/The-Spook-s-Apprentice-The-Last-Apprentice-Wardstone-Chronicles-1-by-Joseph-Delaney.pdf
    • http://seasasac.lflinkup.com/3da2da6da6da5da3/The-Last-Apprentice-Slither-The-Last-Apprentice-Wardstone-Chronicles-11-by-Joseph-Delaney.pdf
    • http://seasasac.lflinkup.com/3da2da2da0da2da9/The-Heretic-s-Apprentice-Chronicles-of-Brother-Cadfael-16-by-Ellis-Peters.pdf
    • http://seasasac.lflinkup.com/3da8da7da4da0/Attack-of-the-Fiend-The-Last-Apprentice-Wardstone-Chronicles-4-by-Joseph-Delaney.pdf
    • http://seasasac.lflinkup.com/1da5da2da8da0da3/A-Coven-of-Witches-The-Last-Apprentice-Wardstone-Chronicles-6-5-by-Joseph-Delaney.pdf
    • http://seasasac.lflinkup.com/3da6da1da3da8/Curse-of-the-Bane-The-Last-Apprentice-Wardstone-Chronicles-2-by-Joseph-Delaney.pdf
    • http://seasasac.lflinkup.com/4da4da8da0da4/The-Spook-s-Blood-The-Last-Apprentice-Wardstone-Chronicles-10-by-Joseph-Delaney.pdf
    • http://seasasac.lflinkup.com/7da8da1da9da7/Wrath-of-the-Bloodeye-The-Last-Apprentice-Wardstone-Chronicles-5-by-Joseph-Delaney.pdf
    • http://seasasac.lflinkup.com/7da5da2da3da9/Spook-s-Alice-The-Last-Apprentice-Wardstone-Chronicles-12-by-Joseph-Delaney.pdf
    • http://seasasac.lflinkup.com/2da1da6da2da2da4/The-Dragon-s-Apprentice-The-Chronicles-of-the-Imaginarium-Geographica-5-by-James-A-Owen.pdf
    • http://seasasac.lflinkup.com/7da5da9da8da3/The-Spook-s-Revenge-The-Last-Apprentice-Wardstone-Chronicles-13-by-Joseph-Delaney.pdf
    • http://seasasac.lflinkup.com/1da8da7da2da3da2/Bright-Star-The-Apprentice-Volume-2-The-Twelve-Systems-Chronicles-2-by-E-G-Manetti.pdf
    • http://seasasac.lflinkup.com/4da8da3da4da1da3/O-Aprendiz-As-Aventuras-do-Ca-a-feiti-o-1-The-Last-Apprentice-Wardstone-Chronicles-1-by-Joseph-Delaney.pdf
    • http://seasasac.lflinkup.com/3da2da3da6da7da1/The-Last-Buccaneer-by-Lynn-Erickson.pdf
    • http://seasasac.lflinkup.com/6da7da7da5da5da3/Corsair-And-Buccaneer-Omnibus-2-In-1-by-Tim-Severin.pdf
    • http://seasasac.lflinkup.com/7da8da6da2da4da1/Paydunor-An-Apprentice-Eternal-An-Apprentice-Eternal-by-Brad-Allen-Deborde.pdf
    • http://seasasac.lflinkup.com/1da7da6da9da2da4/Tamed-by-the-Buccaneer-Pirates-of-the-Jolie-Rouge-Trilogy-3-by-Normandie-Alleman.pdf
    • http://seasasac.lflinkup.com/8da4da8da4da0da7/Valkyria---Games-Valkyria-Chronicles-Valkyria-Chronicles-2-Valkyria-Chronicles-3-Valkyria-Chronicles-Valkyria-Chronicles-2-Valkyria-Chronicles-3-Action-Points-Challenges-of-the-Edy-Detachment-Class-Change-System-Col-Nonnenkof-by-Source-Wikia.pdf
    • http://seasasac.lflinkup.com/1da5da2da8da0da3/A-Coven-of-Witches-The-Last-Apprentice-Wardstone-Chronicles-6-5-by-Joseph-Del

Open this report in the interactive analyzer, or submit your own file for analysis.