Malicious PDF — malware analysis report

Static analysis result for SHA-256 2351e888752ceabd…

MALICIOUS

PDF

16.2 KB Created: 2019-04-30 05:38:15 +01:00 Authoring application: mPDF 5.7
MD5: 10c28fb264b476f41861dbc675eb1fd9 SHA-1: e8eab0814d81f76d095e2475936b1e2ca1908329 SHA-256: 2351e888752ceabda18ff235c4b6852c1ae3d254d1807053ccc69f2bc7d29ed0
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded links to external PDF documents, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this file as malicious with high confidence. While the document body is heavily obfuscated, the presence of numerous links to a single domain suggests a link farm or redirection scheme, likely intended to drive traffic or distribute further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/6a03a07a04a08a07/The-Secret-Sharer-Le-Compagnon-Secret-by-Joseph-Conrad.pdf
    • http://muicuiu.dumb1.com/4a02a06a04a06a01/The-Secret-Sharer-by-Joseph-Conrad.pdf
    • http://muicuiu.dumb1.com/3a02a05a05a04a09/The-Secret-Sharer-and-Other-Stories-by-Joseph-Conrad.pdf
    • http://muicuiu.dumb1.com/2a06a03a09a03a07/The-Secret-Sharer-and-other-stories-by-Joseph-Conrad.pdf
    • http://muicuiu.dumb1.com/3a03a03a08a07/Heart-of-Darkness-and-The-Secret-Sharer-by-Joseph-Conrad.pdf
    • http://muicuiu.dumb1.com/2a01a05a04a04a02/Heart-of-Darkness-and-The-Secret-Sharer-by-Joseph-Conrad.pdf
    • http://muicuiu.dumb1.com/5a08a00a05a04a08/Secret-Agent-by-Joseph-Conrad.pdf
    • http://muicuiu.dumb1.com/2a02a07a06a07a04/The-Secret-Agent-A-Simple-Tale-by-Joseph-Conrad.pdf
    • http://muicuiu.dumb1.com/4a01a00a00a02a01/The-Secret-Agent-A-Simple-Tale-by-Joseph-Conrad.pdf
    • http://muicuiu.dumb1.com/6a05a01a08a09a09/Heart-of-Darkness-Joseph-Conrad-by-Joseph-Conrad.pdf
    • http://muicuiu.dumb1.com/1a01a08a07a01a03a07/Heart-of-Darkness-the-Classic-Novel-by-Joseph-Conrad-Classic-Books-by-Joseph-Conrad.pdf
    • http://muicuiu.dumb1.com/1a02a08a06a09a07/The-Secret-Signature-of-Things-by-Eve-Joseph.pdf
    • http://muicuiu.dumb1.com/1a02a08a00a09a02/The-Nostradamus-Secret-Bob-Danforth-3-by-Joseph-Badal.pdf
    • http://muicuiu.dumb1.com/6a06a06a02a09a01/The-Vatican-s-Last-Secret-by-Francis-Joseph-Smith.pdf
    • http://muicuiu.dumb1.com/2a05a07a08a00a02/The-Secret-World-Of-The-Irish-Male-by-Joseph-O-39-Connor.pdf
    • http://muicuiu.dumb1.com/2a04a04a04a08a09/One-Secret-Night-One-Secret-Baby-Moonlight-Beach-Bachelors-3-by-Charlene-Sands.pdf
    • http://muicuiu.dumb1.com/1a07a02a05a05a08/The-Secret-Guide-to-Dating-Monsters-Secret-McQueen-0-5-by-Sierra-Dean.pdf
    • http://muicuiu.dumb1.com/9a04a01a00a04a07/Secret-Societies-of-the-Middle-Ages-The-Assassins-the-Templars-and-the-Secret-Tribunals-of-Westphalia-by-Thomas-Keightley.pdf
    • http://muicuiu.dumb1.com/3a07a07a07a04a01/The-Secret-Keeping-The-Secret-Trilogy-1-by-Francine-Saint-Marie.pdf
    • http://muicuiu.dumb1.com/2a03a06a03a04a05/The-Secret-Of-Moon-Castle-The-Secret-Series-5-by-Enid-Blyton.pdf
    • http://muicuiu.dumb1.com/1a01a08a07a01a03a07/Heart-of-Darkness-the-Classic-Novel-by-Joseph-Conrad-Classic-Books-

Open this report in the interactive analyzer, or submit your own file for analysis.