Malicious PDF — malware analysis report

Static analysis result for SHA-256 22cee451f074dfaf…

MALICIOUS

PDF

27.6 KB Created: 2019-05-02 06:59:55 +01:00 Authoring application: mPDF 5.7
MD5: 358b6827eb30f2c6e99d84f39126b14d SHA-1: 25ba7960a7d083479078c0d6806ca049e2c0c302 SHA-256: 22cee451f074dfaf4bd7a3d87c5f3488b506f2800f4343a39eabc019368036cf
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links to external PDF documents, as indicated by the PDF_SEO_LINK_FARM heuristic. While the document body is heavily corrupted, the presence of numerous links suggests a link farm or SEO spamming attempt. The ML_NYX_PDF_MALICIOUS heuristic also flagged the document with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9695

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4
    • http://cefasfese.4pu.com/1730736739733736734/Strobist-Photo-Trade-Secrets-Volume-1-Expert-Lighting-Techniques-by-Zeke-Kamm.pdf
    • http://cefasfese.4pu.com/1730735732735732733/The-Cook-s-Compendium-265-Essential-Tips-Techniques-Trade-Secrets-and-Tasty-Recipes-by-Jenni-Davis.pdf
    • http://cefasfese.4pu.com/7730735738731737/Boudoir-Lighting-Simple-Techniques-for-Dramatic-Photography-by-Robin-Owen.pdf
    • http://cefasfese.4pu.com/5733732733735/The-Complete-Photo-Guide-to-Hand-Lettering-and-Calligraphy-The-Essential-Reference-for-Novice-and-Expert-Letterers-and-Calligraphers-by-Abbey-Sy.pdf
    • http://cefasfese.4pu.com/5738733731732731/NLP-Techniques-NLP-Techniques-For-Beginners-NLP-hypnosis-richard-bandler-tony-robbins-nlp-techniques-nlp-how-to-Volume-1-by-Scott-Bandler.pdf
    • http://cefasfese.4pu.com/9733732730732738/The-Lighting-Book-A-Buyer-s-Guide-to-Locating-Almost-Every-Kind-of-Lighting-Device-by-Martin-Greif.pdf
    • http://cefasfese.4pu.com/4735734734732738/The-Little-Book-of-Diet-Help-Expert-Tips-and-Tapping-Techniques-to-Stay-Slim--for-Life-by-Kimberly-Willis.pdf
    • http://cefasfese.4pu.com/1732732737736731/Expert-C-Programming-Deep-C-Secrets-by-Peter-van-der-Linden.pdf
    • http://cefasfese.4pu.com/7730739739730737/Secrets-Volume-8-Secrets-Volume-8-Wyndham-Werewolf-2-by-MaryJanice-Davidson.pdf
    • http://cefasfese.4pu.com/1730736739737730731/Morality-Mortality-Volume-I-Death-and-Whom-to-Save-from-It-Oxford-Ethics-Series-by-F-M-Kamm.pdf
    • http://cefasfese.4pu.com/1731739736733738733/Secrets-of-the-Gem-Trade-The-Connoisseur-s-Guide-to-Precious-Gemstones-by-Richard-W-Wise.pdf
    • http://cefasfese.4pu.com/1731732735735738739/Ursa-Minors-Volume-1-Wait-for-the-Trade-by-Neil-Kleid.pdf
    • http://cefasfese.4pu.com/1730733735736736737/The-Rose-Garden-by-Susanna-Kearsley----Expert-Book-Review-amp-Analysis-by-Expert-Book-Reviews.pdf
    • http://cefasfese.4pu.com/8731731730735737/And-the-Mountains-Echoed-by-Khaled-Hosseini---Expert-Book-Review-amp-Analysis-by-Expert-Book-Reviews.pdf
    • http://cefasfese.4pu.com/6735734736731732/The-Library-of-Essays-on-International-Trade-Law-and-Policy-4-Volume-Set-by-Lorand-Bartels.pdf
    • http://cefasfese.4pu.com/1736734731735737/The-Middleman-Volume-1-The-Trade-Paperback-Imperative-by-Javier-Grillo-Marxuach.pdf
    • http://cefasfese.4pu.com/9732737735730739/Harrington-on-Hold-em-Expert-Strategy-for-No-Limit-Tournaments-Volume-II-The-Endgame-by-Dan-Harrington.pdf
    • http://cefasfese.4pu.com/6738733732739/Harrington-on-Hold-em-Expert-Strategy-for-No-Limit-Tournaments-Volume-I-Strategic-Play-by-Dan-Harrington.pdf
    • http://cefasfese.4pu.com/5734738737732731/Trade-And-Competition-Policies-Comparing-Objectives-And-Methods-Trade-Policy-Issues-No-4-by-Phedon-Nicolaides.pdf
    • http://cefasfese.4pu.com/1731731732732737739/How-to-Draw-Manga-Volume-5-Developing-Shoujo-Techniques-by-Hikaru-Hayashi.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.