Malicious PDF — malware analysis report

Static analysis result for SHA-256 2044ee32b875ab51…

MALICIOUS

PDF

22.9 KB Created: 2019-05-07 03:24:58 +01:00 Authoring application: mPDF 5.7
MD5: ed11888b0b1a7105444534d852fd902a SHA-1: 7b360f4eaf02afd910be53dbe122df8be0072679 SHA-256: 2044ee32b875ab5159d3d849b7f670a23edbca66e1785713b07d22a75eb80c53
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, hosted on a dynamic DNS domain. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier also strongly flagged this PDF as malicious. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9903

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://unieoooq.linkpc.net/14e94e04e94e94e8/Prince-of-Darkness-The-Untold-Story-of-Jeremiah-G-Hamilton-Wall-Street-s-First-Black-Millionaire-by-Shane-White.pdf
    • http://unieoooq.linkpc.net/24e94e24e44e34e5/Fortune-s-Formula-The-Untold-Story-of-the-Scientific-Betting-System-That-Beat-the-Casinos-and-Wall-Street-by-William-Poundstone.pdf
    • http://unieoooq.linkpc.net/24e74e14e54e14e2/Bartleby-The-Scrivener-A-Story-of-Wall-Street-by-Herman-Melville.pdf
    • http://unieoooq.linkpc.net/54e04e64e6/Black-Edge-Inside-Information-Dirty-Money-and-the-Quest-to-Bring-Down-the-Most-Wanted-Man-on-Wall-Street-by-Sheelah-Kolhatkar.pdf
    • http://unieoooq.linkpc.net/64e44e54e14e44e5/Smoketown-The-Untold-Story-of-the-Other-Great-Black-Renaissance-by-Mark-Whitaker.pdf
    • http://unieoooq.linkpc.net/44e14e84e94e9/Too-Big-to-Fail-The-Inside-Story-of-How-Wall-Street-and-Washington-Fought-to-Save-the-Financial-System-from-Crisis-and-Themselves-by-Andrew-Ross-Sorkin.pdf
    • http://unieoooq.linkpc.net/74e14e44e64e4/The-Wolf-of-Wall-Street-The-Wolf-of-Wall-Street-1-by-Jordan-Belfort.pdf
    • http://unieoooq.linkpc.net/44e04e44e1/Hidden-Figures-The-American-Dream-and-the-Untold-Story-of-the-Black-Women-Mathematicians-Who-Helped-Win-the-Space-Race-by-Margot-Lee-Shetterly.pdf
    • http://unieoooq.linkpc.net/44e34e94e84e34e9/Romancing-Snow-White-A-Prince-Charmaine-Story-by-Karen-Kiefer.pdf
    • http://unieoooq.linkpc.net/84e24e94e14e24e9/Mastering-Digital-Black-and-White-A-Photographer-s-Guide-to-High-Quality-Black-And-White-Imaging-and-Printing-by-Amadou-Diallo.pdf
    • http://unieoooq.linkpc.net/44e04e84e14e64e3/In-the-Land-of-Magic-Soldiers-A-Story-of-White-and-Black-in-West-Africa-by-Daniel-Bergner.pdf
    • http://unieoooq.linkpc.net/24e54e64e44e94e0/Party-of-the-Century-The-Fabulous-Story-of-Truman-Capote-and-His-Black-and-White-Ball-by-Deborah-Davis.pdf
    • http://unieoooq.linkpc.net/74e34e24e44e7/Prince-Heir-of-darkness-Prince-Heir-of-Darkness-1-by-Pet-Torres.pdf
    • http://unieoooq.linkpc.net/34e94e44e8/King-of-Wall-Street-by-Louise-Bay.pdf
    • http://unieoooq.linkpc.net/44e74e24e34e04e0/The-Wall-Street-Zen-Golf-Club-by-William-S-Spilman-Jr-.pdf
    • http://unieoooq.linkpc.net/14e54e44e74e54e3/Wall-Street-And-The-Bolshevik-Revolution-by-Antony-C-Sutton.pdf
    • http://unieoooq.linkpc.net/14e14e84e54e24e8/From-Wall-Street-with-Love-Be-Careful-of-What-You-Wish-for-by-Leigh-Boyer.pdf
    • http://unieoooq.linkpc.net/14e84e94e34e34e1/This-Changes-Everything-Occupy-Wall-Street-and-the-99-Movement-by-Sarah-van-Gelder.pdf
    • http://unieoooq.linkpc.net/14e14e94e64e24e9/Fire-amp-Ice-My-Wall-Street-Journey-by-Jung-Sook-Camilla-Lee.pdf
    • http://unieoooq.linkpc.net/14e04e24e84e34e6/Octopus-Sam-Israel-the-Secret-Market-and-Wall-Street-s-Wildest-Con-by-Guy-Lawson.pdf
    • http://unieoooq.linkpc.net/54e04e64e6/Black-Edge-Inside-Information-Dirty-Money-and-the-Quest-to-Bring-Down

Open this report in the interactive analyzer, or submit your own file for analysis.