Malicious PDF — malware analysis report

Static analysis result for SHA-256 1dc5dd82b7539f94…

MALICIOUS

PDF

15.5 KB Created: 2019-05-02 05:22:47 +01:00 Authoring application: mPDF 5.7 First seen: 2021-06-13
MD5: e20df65cd84301aa2fc80de3ca8f32fd SHA-1: bed6aa7b15a20ca5cce1d6a8fa0870002fad6ac9 SHA-256: 1dc5dd82b7539f940cd0e76ba0064e0e24257fa45806b75d103df4fcb959e815
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links, identified as a link farm. These links point to external PDF files, many of which are also art-related, suggesting a tactic to inflate search engine rankings or distribute potentially malicious content under a benign guise. No scripts were extracted, and the document body was unreadable, limiting further analysis.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9778

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/8739737730739731/God-s-Garden-Sketches-Drawings-and-Watercolors-by-Norman-Matheis.pdf In PDF document text
    • http://cefasfese.4pu.com/7730731735738738/Auguste-Rodin-Drawings-Watercolors-by-Antoinette-Le-Normand-Romain.pdfIn PDF document text
    • http://cefasfese.4pu.com/8737734738737733/Richard-Lindner-Catalogue-Raisonne-of-Paintings-Watercolors-and-Drawings-by-Werner-Spies.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730733730739731735/Sketches-of-Po-s-Poems-amp-Drawings-by-James-Just.pdfIn PDF document text
    • http://cefasfese.4pu.com/1737739732738/Ralph-Rapson-Sketches-and-Drawings-from-Around-the-World-by-Ralph-Rapson.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730736732730735738/A-Pocketful-of-Watercolors-by-Philip-Enquist.pdfIn PDF document text
    • http://cefasfese.4pu.com/8737734738737734/Richard-Lindner-Paintings-and-Watercolors-1948-1977-by-Judith-Zilczer.pdfIn PDF document text
    • http://cefasfese.4pu.com/8739737730730735/Meet-Kai-lan-by-Mickie-Matheis.pdfIn PDF document text
    • http://cefasfese.4pu.com/8739737730738737/Gymnastics-Fun-by-Mickie-Matheis.pdfIn PDF document text
    • http://cefasfese.4pu.com/8739737731737737/The-Butterfly-Parade-by-Mickie-Matheis.pdfIn PDF document text
    • http://cefasfese.4pu.com/8739737732735732/Nella-and-the-Dragon-by-Mickie-Matheis.pdfIn PDF document text
    • http://cefasfese.4pu.com/8739737730739739/Jans-Abenteuer-by-Elisabeth-Matheis.pdfIn PDF document text
    • http://cefasfese.4pu.com/8739737730730739/Babysitting-Blues-by-Mickie-Matheis.pdfIn PDF document text
    • http://cefasfese.4pu.com/8739737730739733/Peanuts-Mad-Libs-by-Mickie-Matheis.pdfIn PDF document text
    • http://cefasfese.4pu.com/7737733736731736/Herb-Garden-Design-Planting-with-Purpose-The-garden-bookshelf-by-Ethne-Clarke.pdfIn PDF document text
    • http://cefasfese.4pu.com/8739737733736736/Inverted-Edge-Tactics-How-to-cut-someone-off-of-you-by-George-F-Matheis-Jr.pdfIn PDF document text
    • http://cefasfese.4pu.com/4736739730736732/Kai-lan-s-Great-Trip-to-China-by-Mickie-Matheis.pdfIn PDF document text
    • http://cefasfese.4pu.com/8739737731736731/Tim-und-Jessica-finden-den-Schatz-by-Elisabeth-Matheis.pdfIn PDF document text
    • http://cefasfese.4pu.com/8739737731730730/The-Search-for-the-Oopsy-Daisy-by-Mickie-Matheis.pdfIn PDF document text
    • http://cefasfese.4pu.com/4735735731739732/Humility-Garden-Garden-of-Salt-1-by-Felicity-Savage.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.