Malicious PDF — malware analysis report

Static analysis result for SHA-256 1f357101ab4cbd5c…

MALICIOUS

PDF

24.0 KB Created: 2019-05-01 05:27:08 +01:00 Authoring application: mPDF 5.7
MD5: 7edec7e418b6d2db4f3ab5879d31316d SHA-1: 1ad35654b6417472707306f78859bc5df11fe1a6 SHA-256: 1f357101ab4cbd5c4edc684ae2c63765704a3a32a227da9346965517a6d15ef2
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file was flagged by a machine learning classifier as malicious. It contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, which likely serve as a link farm to distribute malicious content or facilitate phishing. The ML classifier's high confidence score supports the malicious nature of the document.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9901

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://unieoooq.linkpc.net/14e04e54e94e44e04e2/Erzahler---Text---Leser-in-Ovids-Metamorphosen-by-Henning-Horstmann.pdf
    • http://unieoooq.linkpc.net/14e04e54e94e34e54e4/19-Erzahler-Der-Ddr-by-Dieter-Cassel.pdf
    • http://unieoooq.linkpc.net/14e14e34e84e54e04e5/More-S-t-People-Text-Insanely-Hilarious-Real-Text-Messages-by-Russel-Jackson.pdf
    • http://unieoooq.linkpc.net/14e14e64e44e24e64e8/Graben-in-Syrien-Digging-in-Syria-Text-Und-Zeichnungen-Text-and-Drawings-by-Theo-de-Feyter.pdf
    • http://unieoooq.linkpc.net/54e94e74e64e54e6/Pericles-Prince-of-Tyre-The-Players-Text-of-1609-with-the-Third-Folio-Text-of-1663-4-by-William-Shakespeare.pdf
    • http://unieoooq.linkpc.net/14e04e54e94e34e54e6/Achtundzwanzig-walisische-Erz-hler-by-Hans-Petersen.pdf
    • http://unieoooq.linkpc.net/94e94e24e44e24e8/Die-Grenzen-Der-Vernunft-Eine-Untersuchung-Zu-Zielen-Und-Motiven-Des-Deutschen-Idealismus-by-Rolf-Peter-Horstmann.pdf
    • http://unieoooq.linkpc.net/84e64e94e44e24e3/Metamorphosen-Reclam-Taschenbuch-by-Ovid.pdf
    • http://unieoooq.linkpc.net/94e64e24e84e94e8/Metamorphosen-des-Kreises-in-der-Dichtung-by-Georges-Poulet.pdf
    • http://unieoooq.linkpc.net/14e04e74e14e04e94e3/Biography-as-a-Religious-and-Cultural-Text-Biographie-ALS-Religioser-Und-Kultureller-Text-Mit-Beitragen-Von-Anthony-J-Cascardi-Dietrich-Ritschl-Roxane-Witke-U-A-et-al-by-Schule.pdf
    • http://unieoooq.linkpc.net/14e04e04e64e74e64e5/Irische-Legende-Mysterien-Mythen-Metamorphosen-by-Franz-J-Liessem.pdf
    • http://unieoooq.linkpc.net/14e14e04e94e64e04e3/Weniger-reden-und-fter-mal-in-die-Badewanne---Mein-Leben-als-Leser-by-Nick-Hornby.pdf
    • http://unieoooq.linkpc.net/94e44e34e44e24e4/Am-Anfang-Steht-Die-Auswahl-Der-Bibliothekar-Zwischen-Buch-Und-Leser-by-Werner-A-Kleye.pdf
    • http://unieoooq.linkpc.net/14e14e84e84e64e94e0/Der-Kindliche-Ich-Erzahler-in-Der-Modernen-Kinderliteratur-Der-Eine-Erzahltheoretische-Analyse-Mit-Blick-Auf-Aktuelle-Kinderromane-by-Regina-Hofmann.pdf
    • http://unieoooq.linkpc.net/34e34e34e54e54e0/Whispers-in-the-Branches-Text-only-version-Text-Only-Version-by-Brandy-Heineman.pdf
    • http://unieoooq.linkpc.net/84e64e24e64e04e3/The-Book-List-Henning-Mankell-Henning-Mankell-Reading-List-Books-in-Order-and-Books-in-Series-The-Librarian-6-by-The-Librarian.pdf
    • http://unieoooq.linkpc.net/74e44e74e54e14e0/Metamorphosen-B-cher-der-Verwandlungen-Vollst-ndige-deutsche-Ausgabe-Mythologie-Entstehung-und-Geschichte-der-Welt-von-Publius-Ovidius-Naso-by-Ovid.pdf
    • http://unieoooq.linkpc.net/84e14e94e64e24e7/Der-Ideale-Leser-Bei-Valery-Larbaud-Valery-Larbauds-Vorstellung-Von--Elite-Lettree---Litteratus--Und--Clericus--In-Der-Moderne-by-Dietrich-Luckoff.pdf
    • http://unieoooq.linkpc.net/54e04e24e54e14e4/Text-Me-Text-Me-1-by-K-J-Reed.pdf
    • http://unieoooq.linkpc.net/74e54e84e54e84e3/Midzomermoord-by-Henning-Mankell.pdf
    • http://unieoooq.linkpc.net/54e94e74e64e54e6/Pericles-Prince-of-T

Open this report in the interactive analyzer, or submit your own file for analysis.