Malicious PDF — malware analysis report

Static analysis result for SHA-256 2042e0f7b5e96223…

MALICIOUS

PDF

13.6 KB Created: 2019-04-30 04:21:59 +01:00 Authoring application: mPDF 5.7
MD5: 29871090b7c317db4c3f5c5b5def8c57 SHA-1: f8a0233ac0d51da10f8b1887e156fd1fb3654a54 SHA-256: 2042e0f7b5e9622328eb759d3b3f6c6501b8d8066bb6ace2091f6af5f428513a
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDFs hosted on the domain 'muicuiu.dumb1.com'. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier also flagged this PDF as malicious with a high probability. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9102

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/4a04a02a00a08a09/Joy-in-the-Morning-by-Betty-Smith.pdf
    • http://muicuiu.dumb1.com/4a03a00a01a02a01/Cobweb-Morning-by-Betty-Neels.pdf
    • http://muicuiu.dumb1.com/8a08a05a09a03/A-Tree-Grows-in-Brooklyn-by-Betty-Smith.pdf
    • http://muicuiu.dumb1.com/8a07a03a02a09a01/Ein-Baum-w-chst-in-Brooklyn-by-Betty-Smith.pdf
    • http://muicuiu.dumb1.com/2a03a06a04a07a01/A-Tree-Grows-in-Brooklyn-by-Betty-Smith.pdf
    • http://muicuiu.dumb1.com/8a06a02a00a06a06/Ein-Baum-w-chst-in-Brooklyn-by-Betty-Smith.pdf
    • http://muicuiu.dumb1.com/4a08a01a02a05a06/A-Tree-Grows-in-Brooklyn-by-Betty-Smith.pdf
    • http://muicuiu.dumb1.com/7a04a04a06a02a08/Journey-to-Valhalla-The-Lauritz-Melchior-Story-by-Betty-Smith.pdf
    • http://muicuiu.dumb1.com/2a03a08a08a04a04/Top-of-the-Morning-Inside-the-Cutthroat-World-of-Morning-TV-by-Brian-Stelter.pdf
    • http://muicuiu.dumb1.com/3a00a08a03a05a03/Betty-Crocker-Whole-Grains-Easy-Everyday-Recipes-by-Betty-Crocker.pdf
    • http://muicuiu.dumb1.com/3a00a08a05a04a06/Betty-Crocker-Christmas-Cookbook-by-Betty-Crocker.pdf
    • http://muicuiu.dumb1.com/2a06a04a02a01a08/Betty-Crocker-s-Cooky-Book-by-Betty-Crocker.pdf
    • http://muicuiu.dumb1.com/2a01a00a09a00a08/The-Plague-and-I-Betty-MacDonald-Memoirs-2-by-Betty-MacDonald.pdf
    • http://muicuiu.dumb1.com/6a01a01a08a02/Betty-Crocker-s-Cookbook-by-Betty-Crocker.pdf
    • http://muicuiu.dumb1.com/3a05a02a01a00/The-History-of-Joseph-Smith-by-His-Mother-by-Lucy-Mack-Smith.pdf
    • http://muicuiu.dumb1.com/4a07a09a03a02a09/History-of-Joseph-Smith-by-His-Mother-Lucy-Mack-Smith-by-Lucy-Mack-Smith.pdf
    • http://muicuiu.dumb1.com/2a07a01a05a06a08/Smith-s-Bible-Dictionary-by-William-Smith.pdf
    • http://muicuiu.dumb1.com/1a09a04a00a09a08/The-Sun-in-the-Morning-by-Jim-Hunter.pdf
    • http://muicuiu.dumb1.com/1a06a06a05a02a07/Until-the-Morning-by-S-C-Wynne.pdf
    • http://muicuiu.dumb1.com/1a00a00a09a06a06/The-Roar-of-Morning-by-Tip-Marugg.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.