Malicious PDF — malware analysis report

Static analysis result for SHA-256 29b05d00e786c523…

MALICIOUS

PDF

18.6 KB Created: 2019-05-01 20:24:41 +01:00 Authoring application: mPDF 5.7
MD5: 572f943bf0a423bf6fe6dc0e7685b98f SHA-1: f89e77cb8c57e57b4cb274e89b8066bc25d76b83 SHA-256: 29b05d00e786c523ad1bf8f5001521091b3d5a67c47074ee733ff4bd3956520c
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. While most of these links point to benign content, the sheer volume and the ML classifier's high confidence score suggest a malicious intent, possibly for SEO manipulation or to distribute further malware. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://unieoooq.linkpc.net/34e54e74e94e74e5/Walking-on-Mars-1-Destination-Vostok-by-Briar-Lee-Mitchell.pdf
    • http://unieoooq.linkpc.net/54e64e34e64e14e3/A-Princess-of-Mars-Gods-of-Mars-Warlord-of-Mars-Thuvia-Maid-of-Mars-Chessmen-of-Mars-Master-Mind-of-Mars-Fighting-Man-of-Mars-Barsoom-1-7-by-Edgar-Rice-Burroughs.pdf
    • http://unieoooq.linkpc.net/14e14e04e54e34e54e3/Destination-Resilience-Challenges-and-Opportunities-for-Destination-Management-and-Governance-by-Elisa-Innerhofer.pdf
    • http://unieoooq.linkpc.net/14e14e04e54e34e54e6/Destination-Resilience-Challenges-and-Opportunities-for-Destination-Management-and-Governance-by-Elisa-Innerhofer.pdf
    • http://unieoooq.linkpc.net/94e44e44e54e74e1/Vostok-by-Steve-Alten.pdf
    • http://unieoooq.linkpc.net/64e24e24e94e44e4/Vivre-aimer-mourir-Sur-Mars-Florence-Porcel-Mars-One-D-collage-2024-by-Etienne-Tellier.pdf
    • http://unieoooq.linkpc.net/24e44e54e34e6/Blue-Mars-Mars-Trilogy-3-by-Kim-Stanley-Robinson.pdf
    • http://unieoooq.linkpc.net/24e44e54e44e7/Green-Mars-Mars-Trilogy-2-by-Kim-Stanley-Robinson.pdf
    • http://unieoooq.linkpc.net/14e14e34e84e64e64e9/Is-Mars-Habitable-A-Critical-Examination-of-Professor-Percival-Lowell-s-Book-Mars-and-Its-Canals-with-an-Alternative-Explanation-by-Alfred-Russel-Wallace.pdf
    • http://unieoooq.linkpc.net/24e44e94e24e9/Red-Mars-Mars-Trilogy-1-by-Kim-Stanley-Robinson.pdf
    • http://unieoooq.linkpc.net/44e84e64e94e44e5/Merry-Mitchell-Affair-The-Mitchell-Healy-Family-3-5-by-Jennifer-Foor.pdf
    • http://unieoooq.linkpc.net/64e04e54e34e44e6/Z-Minus-I-by-Perrin-Briar.pdf
    • http://unieoooq.linkpc.net/14e14e64e54e84e64e0/The-Walking-Dead-Roman-The-Walking-Dead-Romane-Band-1-by-Robert-Kirkman.pdf
    • http://unieoooq.linkpc.net/14e54e94e84e84e7/Sink-Old-Man-s-Tale-by-Perrin-Briar.pdf
    • http://unieoooq.linkpc.net/44e64e84e64e64e4/Scarlet-Briar-by-Mara-Ryder.pdf
    • http://unieoooq.linkpc.net/14e04e84e84e44e74e1/Damen-Briar-by-Brad-Rieman.pdf
    • http://unieoooq.linkpc.net/74e14e94e74e4/Briar-Rose-by-Jana-Oliver.pdf
    • http://unieoooq.linkpc.net/24e44e24e94e24e4/The-Chase-Briar-U-1-by-Elle-Kennedy.pdf
    • http://unieoooq.linkpc.net/54e84e24e14e04e4/The-Walking-Dead-Book-Twelve-The-Walking-Dead-133-144-by-Robert-Kirkman.pdf
    • http://unieoooq.linkpc.net/44e04e04e94e54e7/Briar-Rose-Celtic-Rogues-3-by-Kimberly-Cates.pdf
    • http://unieoooq.linkpc.net/14e14e04e54e34e54e6/Destination-Resilience-Challenges-and-Opportun

Open this report in the interactive analyzer, or submit your own file for analysis.