Malicious PDF — malware analysis report

Static analysis result for SHA-256 1e7916d13c84d747…

MALICIOUS

PDF

28.8 KB Created: 2019-04-30 04:19:22 +01:00 Authoring application: mPDF 5.7
MD5: 311ae3fe63a922ea275a27c1d5b5e380 SHA-1: 9d2f4a326448e1323c9c6ec78d579f67771fe596 SHA-256: 1e7916d13c84d7474aaa491ed5c67ba7604f6ac389bf2af3bbd972bbbfe5c2f4
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links pointing to external PDF documents hosted on a dynamic DNS domain. This behavior is indicative of a link farm or SEO poisoning tactic, designed to drive traffic to specific content. While no scripts were extracted, the PDF structure and the sheer volume of external links strongly suggest a malicious intent to manipulate search engine results or direct users to potentially harmful content. The ML classifier also flagged this PDF with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9895

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://unieoooq.linkpc.net/14e14e84e14e44e94e4/Tierbuch-f-r-Kinder---Delfine-by-Karla-Sternberg.pdf
    • http://unieoooq.linkpc.net/94e44e54e64e64e8/Ungl-ckliche-Kinder---was-machen-wir-blo-falsch-Von-berbeh-tung-ber-falsche-Ern-hrung-bis-Mobbing-Aufstand-der-Kinder---So-misslingt-die-Erziehung-unserer-Kinder-garantiert-by-Dantse-Dantse.pdf
    • http://unieoooq.linkpc.net/94e44e54e64e64e7/Ungluckliche-Kinder---Noch-Mehr-Dinge-Die-Wir-Falsch-Machen-Konnen-Von-Angsten-Uber-Urvertrauen-Bis-Pubertat-Aufstand-Der-Kinder---So-Misslingt-Die-Erziehung-Unserer-Kinder-Garantiert-by-Dantse-Dantse.pdf
    • http://unieoooq.linkpc.net/14e14e74e84e84e34e7/Die-Kinder-aus-Nr-67-Band-3-Die-Kinder-auf-der-Insel-Mirjam-in-Amerika-by-Lisa-Tetzner.pdf
    • http://unieoooq.linkpc.net/94e14e74e84e44e0/Kinder-verstehen-Born-to-be-wild-Wie-die-Evolution-unsere-Kinder-pr-gt-by-Herbert-Renz-Polster.pdf
    • http://unieoooq.linkpc.net/94e44e24e64e24e7/Die-Elfe-Morgentau---Einschlafgeschichten-f-r-Kinder-mit-eingewebten-Entspannungs-bungen-Spannende-Entspannung-f-r-Kinder-by-Christiane-Heyn.pdf
    • http://unieoooq.linkpc.net/14e04e94e64e74e14e3/Das-Spannungsverh-ltnis-zwischen-Kinder--und-Jugendhilfe-und-Kinder--und-Jugendpsychiatrie-Bef-higung-als-Handlungsorientierung-in-der-Sozialen-Arbeit-belasteten-jungen-Menschen-by-Michael-Tetzer.pdf
    • http://unieoooq.linkpc.net/14e04e94e84e44e54e8/Die-Haushaltung-Gottes-Vol-2-Enthaltend-Die-Fortie-ung-Der-Urgefchichte-Der-Menfchheit-in-Den-F-hrungen-Der-Uw-ter-Fowohl-Der-Kinder-Der-H-he-ALS-Auch-Der-Kinder-Der-Tiefe-Kabine-Nachkommen-by-Jakob-Lorber.pdf
    • http://unieoooq.linkpc.net/14e14e94e44e84e04e5/Kinderb-cher-Abenteuer-von-kleinen-Fischen-IN-DER-SUCHE-EINES-FREUNDES-Bilderb-cher-kinder-Leseanf-nger-deutsch-kinder-buch-Schlafenszeit-Gutenachtgeschichten-German-edition-by-Anna-Smith.pdf
    • http://unieoooq.linkpc.net/64e94e94e44e24e0/Curvature-in-Mathematics-and-Physics-by-Shlomo-Sternberg.pdf
    • http://unieoooq.linkpc.net/54e84e94e34e2/Like-Bug-Juice-on-a-Burger-Eleanor-2-by-Julie-Sternberg.pdf
    • http://unieoooq.linkpc.net/14e14e94e14e44e24e0/Minions-Malbuch-Ein-Schones-Malbuch-Fur-Kinder-Ein-A4-63-Seiten-Starke-Buch-Voller-Possen-Von-Bob-Stuart-Und-Kevin-Mit-Stundenlangen-Spab-Kreativ-Mit-Was-Man-So-Fur-Kinder-Warten-Gehen-Sie-Stifte-Greifen-Und-Beginnen-Farbung-by-K-W-Books.pdf
    • http://unieoooq.linkpc.net/54e74e14e04e24e8/Das-Haus-in-der-Rothschildallee-Familie-Sternberg-1-by-Stefanie-Zweig.pdf
    • http://unieoooq.linkpc.net/34e74e84e64e64e8/Wisdom-Its-Nature-Origins-and-Development-by-Robert-J-Sternberg.pdf
    • http://unieoooq.linkpc.net/14e14e84e14e44e44e4/Delfine-in-Gefahr-by-Dagmar-H-Mueller.pdf
    • http://unieoooq.linkpc.net/14e14e84e14e44e94e5/Wale-und-Delfine-by-Heike-Siewert.pdf
    • http://unieoooq.linkpc.net/14e14e84e14e54e14e0/Auf-hoher-See-Jody-und-die-Delfine-1-by-Lucy-Daniels.pdf
    • http://unieoooq.linkpc.net/94e34e54e04e54e9/Benny-Blu---Delfine-Schlaue-Schwimmer-by-Nicola-Herbst.pdf
    • http://unieoooq.linkpc.net/14e14e84e14e54e64e1/Wale-und-Delfine---die-spirituellen-Begleiter-by-Angela-Maria.pdf
    • http://unieoooq.linkpc.net/14e14e84e14e64e54e4/Der-Schatz-in-der-Tiefe-Jody-und-die-Delfine-3-by-Lucy-Daniels.pdf
    • http://unieoooq.linkpc.net/94e44e54e64e64e7/Ungluckliche-Kinder---Noch-Mehr-Dinge-Die-Wir-Falsch-Machen-Konnen-Von-An

Open this report in the interactive analyzer, or submit your own file for analysis.