Malicious PDF — malware analysis report

Static analysis result for SHA-256 2d81a2dc4e7a5c64…

MALICIOUS

PDF

17.6 KB Created: 2019-05-01 19:33:15 +01:00 Authoring application: mPDF 5.7
MD5: a561e19682e5879d7291476378bacaa8 SHA-1: d06aecf07348eb25732a252e054dea744203c8be SHA-256: 2d81a2dc4e7a5c6472ebc9f2599f9c71c60702a03456eae05cfd31fd587b97f9
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDF documents, a technique often used for SEO manipulation or to distribute malicious content. The ML classifier strongly indicated maliciousness. The primary attack pattern observed is the creation of a link farm, likely to direct users to potentially harmful content disguised as legitimate documents.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://unieoooq.linkpc.net/14e14e54e44e74e74e5/Tarot-for-Beginners-An-Easy-Guide-to-Understanding-amp-Interpreting-the-Tarot-by-P-Scott-Hollander.pdf
    • http://unieoooq.linkpc.net/14e14e54e44e84e64e8/Holistic-Tarot-An-Integrative-Approach-to-Using-Tarot-for-Personal-Growth-by-Benebell-Wen.pdf
    • http://unieoooq.linkpc.net/14e14e54e44e74e74e6/Tarot-Triumphs-Using-the-Tarot-Trumps-for-Divination-and-Inspiration-by-Cherry-Gilchrist.pdf
    • http://unieoooq.linkpc.net/14e04e94e14e24e24e1/The-2-Hour-Tarot-Tutor-The-Fast-Revolutionary-Method-for-Learning-to-Read-Tarot-Cards-in-Two-Hours-by-Wilma-Carroll.pdf
    • http://unieoooq.linkpc.net/14e14e54e44e74e84e5/The-Key-to-the-Tarot-What-Tarot-Is---And-How-to-Consult-It-by-Arthur-Edward-Waite.pdf
    • http://unieoooq.linkpc.net/44e94e74e94e8/Uncloaking-the-Tarot-A-Comprehensive-Course-in-Tarot-by-Brigid-Bishop.pdf
    • http://unieoooq.linkpc.net/44e04e64e14e34e6/Vision-of-Tarot-Tarot-2-by-Piers-Anthony.pdf
    • http://unieoooq.linkpc.net/14e14e54e44e54e84e2/Faith-of-Tarot-Tarot-3-by-Piers-Anthony.pdf
    • http://unieoooq.linkpc.net/14e14e54e44e74e34e5/The-Ultimate-Guide-to-Tarot-A-Beginner-s-Guide-to-the-Cards-Spreads-and-Revealing-the-Mystery-of-the-Tarot-by-Liz-Dean.pdf
    • http://unieoooq.linkpc.net/24e34e44e74e74e3/God-of-Tarot-Tarot-1-by-Piers-Anthony.pdf
    • http://unieoooq.linkpc.net/44e84e04e74e04e6/Slammer-by-Tabatha-Vargo.pdf
    • http://unieoooq.linkpc.net/14e24e54e94e24e4/Florida-Gothic-The-quot-Gothic-quot-Series-Book-1-by-Mitzi-Szereto.pdf
    • http://unieoooq.linkpc.net/34e54e54e64e84e0/Finding-Faith-Blow-Hole-Boys-2-by-Tabatha-Vargo.pdf
    • http://unieoooq.linkpc.net/14e14e94e44e94e94e8/Midwestern-Gothic-Issue-6---Summer-2012-by-Midwestern-Gothic.pdf
    • http://unieoooq.linkpc.net/84e04e74e54e14e6/Midwestern-Gothic-Fall-2014---Issue-15-by-Midwestern-Gothic.pdf
    • http://unieoooq.linkpc.net/14e14e94e54e24e54e4/Learning-Chef-A-Configuration-Management-and-Automation-Framework-by-Seth-Vargo.pdf
    • http://unieoooq.linkpc.net/94e24e74e64e64e9/A-Noble-Priest-Joseph-Salzmann-D-D-Founder-of-the-Salesianum-by-Joseph-Rainer.pdf
    • http://unieoooq.linkpc.net/34e74e64e04e24e1/Joseph-s-Surprise-Gifts-Joseph-Land-2-by-J-Hale-Turner.pdf
    • http://unieoooq.linkpc.net/14e14e54e44e74e34e1/Tarot-of-the-Bohemians-by-Papus.pdf
    • http://unieoooq.linkpc.net/74e24e14e34e74e8/Tarot-Tea-and-Terrapins-by-Brina-Katz.pdf
    • http://unieoooq.linkpc.net/44e94e74e94e8/Uncl

Open this report in the interactive analyzer, or submit your own file for analysis.