Malicious PDF — malware analysis report

Static analysis result for SHA-256 2be4160a5b7bbe49…

MALICIOUS

PDF

16.2 KB Created: 2020-03-18 22:08:42 +00:00 Authoring application: mPDF 5.7 First seen: 2021-06-20
MD5: cc10ca078f8bf07a44799a2bf3124d86 SHA-1: 1019f9272c875e518843fd2d07a18c19712d8a60 SHA-256: 2be4160a5b7bbe490f33d18a23455d98cc39e472269295da2f9d3da463d6352a
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. These links, such as http://weisncio.myhome.cx/5628629628620628/Yu-Yu-Hakusho-Volume-8-Open-Your-Eyes-Yu-Yu-Hakusho-8-by-Yoshihiro-Togashi.pdf, are likely intended to direct the user to malicious websites. The ML_NYX_PDF_MALICIOUS heuristic also flagged this document as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://weisncio.myhome.cx/5628629628620628/Yu-Yu-Hakusho-Volume-8-Open-Your-Eyes-Yu-Yu-Hakusho-8-by-Yoshihiro-Togashi.pdf In PDF document text
    • http://weisncio.myhome.cx/5628629628626629/Yu-Yu-Hakusho-Volume-18-The-Demon-Plane-Unification-Tournament-Yu-Yu-Hakusho-18-by-Yoshihiro-Togashi.pdfIn PDF document text
    • http://weisncio.myhome.cx/5628629628626628/Yu-Yu-Hakusho-Volume-15-Showdown-at-the-Eleventh-Hour-Yu-Yu-Hakusho-15-by-Yoshihiro-Togashi.pdfIn PDF document text
    • http://weisncio.myhome.cx/5628629628626623/Yu-Yu-Hakusho-Volume-14-A-Bloody-Past-Yu-Yu-Hakusho-14-by-Yoshihiro-Togashi.pdfIn PDF document text
    • http://weisncio.myhome.cx/5628629627625629/Yu-Yu-Hakusho-Volume-6-The-Dark-Tournament-Yu-Yu-Hakusho-6-by-Yoshihiro-Togashi.pdfIn PDF document text
    • http://weisncio.myhome.cx/1621626622625620623/YuYu-Hakusho-Volume-13-Full-Power-One-Last-Time-by-Yoshihiro-Togashi.pdfIn PDF document text
    • http://weisncio.myhome.cx/8624628627628/Weed-Volume-2-by-Yoshihiro-Takahashi.pdfIn PDF document text
    • http://weisncio.myhome.cx/3623629621626628/Open-Your-Eyes-by-Jani-Kay.pdfIn PDF document text
    • http://weisncio.myhome.cx/4628626622625628/Open-Your-Eyes-by-Paul-Jessup.pdfIn PDF document text
    • http://weisncio.myhome.cx/5628628624624626/Open-Your-Eyes-The-Missing-1-by-Joanne-Clancy.pdfIn PDF document text
    • http://weisncio.myhome.cx/4624625627626625/Seer-Eyes-Wide-Open-4-by-Ted-Dekker.pdfIn PDF document text
    • http://weisncio.myhome.cx/6627629620628/Identity-Eyes-Wide-Open-1-by-Ted-Dekker.pdfIn PDF document text
    • http://weisncio.myhome.cx/3625622624628620/Eyes-Wide-Open-The-Outlaw-Chronicles-1-by-Ted-Dekker.pdfIn PDF document text
    • http://weisncio.myhome.cx/8629626629626620/Sustainable-Materials---With-Both-Eyes-Open-by-Julian-M-Allwood.pdfIn PDF document text
    • http://weisncio.myhome.cx/9627621628621629/Lucian-Freud-Eyes-Wide-Open-by-Phoebe-Hoban.pdfIn PDF document text
    • http://weisncio.myhome.cx/4622628620620/Eyes-Wide-Open-The-Blackstone-Affair-3-by-Raine-Miller.pdfIn PDF document text
    • http://weisncio.myhome.cx/4629626628627627/Let-My-Love-Open-the-Door-Behind-Blue-Eyes-3-by-Anne-Marie-Klein.pdfIn PDF document text
    • http://weisncio.myhome.cx/6625620626624628/Eyes-Wide-Open-A-Memoir-of-Stanley-Kubrick-by-Frederic-Raphael.pdfIn PDF document text
    • http://weisncio.myhome.cx/5628629628627620/Hunter-x-Hunter-Vol-23-Hunter-x-Hunter-23-by-Yoshihiro-Togashi.pdfIn PDF document text
    • http://weisncio.myhome.cx/5628629628621629/Hunter-x-Hunter-Vol-33-Hunter-x-Hunter-33-by-Yoshihiro-Togashi.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.