PDF malware analysis — malicious · 210a48e9f68213b3

MALICIOUS

PDF

52.6 KB Created: 2021-04-06 18:57:38 +03:00 Authoring application: wkhtmltopdf 0.12.5 (via Qt 4.8.7) First seen: 2021-09-23

MD5: 710b895b4c398c232d82917dde0cae4f SHA-1: 6ff3b4cd31b170762a9fc6085abc7f0675b87790 SHA-256: 210a48e9f68213b3ec14c3347a8b57da7bfe3d764a2e9b5a3f74719aad774c53

94 Risk Score

Malware Insights

MITRE ATT&CK

T1566.001 Spearphishing Attachment

This PDF document was flagged as malicious by ClamAV and an ML classifier. The file embeds external URLs that direct users to attacker-controlled resources. Specific URLs and indicators for this sample are listed in the indicators section.

Machine Learning

Nyx PDF Classifier malicious score 0.7797

Heuristics 3

ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
External URI info PDF_URI

PDF contains an external URL action
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL https://gimoguvi.ru/aws?utm_term=250+gramos+de+harina+cuantos+mililitros+son PDF link annotation
- https://cdn-cms.f-static.net/uploads/4369783/normal_606bf135e7d20.pdfIn PDF document text
- http://joy-todays.online/samsung_scx-4623f_driver_windows_xpm3w93.pdfIn PDF document text
- http://kataeta.club/flick_instagram_hashtags_reviewmaihf.pdfIn PDF document text
- https://cdn.sqhk.co/xenudipu/iigiq0v/lofupagifirirugetut.pdfIn PDF document text
- http://mestorating.ru/concrete_mix_ratio_table_philippineshixx6.pdfIn PDF document text
- https://cdn.sqhk.co/revidifok/IGB1agi/download_game_driving_school_2018_mod_apk_hack.pdfIn PDF document text
- http://lightly.store/chickie_and_pete_s_nutrition_guidejo9et.pdfIn PDF document text
- https://static.s123-cdn-static.com/uploads/4501770/normal_5ffca9a830939.pdfIn PDF document text
- http://fastcreditreport.info/what_does_socio_economic_impact_meanuht3u.pdfIn PDF document text
- https://static.s123-cdn-static.com/uploads/4393898/normal_5ffb9e86a9de7.pdfIn PDF document text
- http://mazanatur.space/4889461702n0gra.pdfIn PDF document text
- https://cdn.sqhk.co/busumodofu/Hihshho/kijepi.pdfIn PDF document text
- https://cdn-cms.f-static.net/uploads/4461746/normal_5fd661b49b015.pdfIn PDF document text
- https://cdn.sqhk.co/padixemugex/FribOYR/zuxojaba.pdfIn PDF document text
- http://dompodklyuch.com/game_textures_freee4355.pdfIn PDF document text
- https://s3.amazonaws.com/jezaxojipevu/famobalobotarivi.pdfIn PDF document text
- https://s3.amazonaws.com/litunux/xatitur.pdfIn PDF document text
- https://s3.amazonaws.com/metubevozisul/overeaters_anonymous_gray_sheet_food_plan.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/baee00ef-52e1-47a0-870b-eab49f10edda/2011_chevy_malibu_led_tail_lights.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/6762787f-f679-411b-9add-84d641eee664/80380888960.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/cec6106e-6481-4645-921d-6b90b17ff128/do_pellet_stoves_have_battery_backup.pdfIn PDF document text
- https://s3.amazonaws.com/dejazuvorira/76414317693.pdfIn PDF document text
- https://uploads.strikinglycdn.com/files/602d01b9-3017-481f-8dbf-6d852222cced/davinci_resolve_16_slideshow_tutorial_for_beginners.pdfIn PDF document text
- https://s3.amazonaws.com/fopalew/31455468237.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.