Malicious PDF — malware analysis report

Static analysis result for SHA-256 2f07d674ba7f3077…

MALICIOUS

PDF

21.9 KB Created: 2020-02-05 09:28:55 +00:00 Authoring application: mPDF 5.7
MD5: fba7b779d1856d54b5cff76d6ecfbecb SHA-1: df9a4c277a1f3e357887d94874985a401c8a3c34 SHA-256: 2f07d674ba7f307796aff675e443f2ae70eb352790afe3536f9d3b69fb9a351e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1190 Exploit Public-Facing Application

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of embedded external links. These links likely serve to distribute malicious content or engage in SEO manipulation. The primary attack pattern observed is the creation of a link farm designed to lure users to potentially harmful external resources.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://owlaokopdf.myhome.cx/981618161816681668168/Steppenwolf-The-Genius-of-Suffering-Interpreting-Hesse-s-Steppenwolf-by-Hassan-M-Malik.pdf In PDF document text
    • http://owlaokopdf.myhome.cx/381608165816781668162/Steppenwolf-by-Hermann-Hesse.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/481618160816981688165/Steppenwolf-by-Hermann-Hesse.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981618161816681678160/Hermann-Hesse-s-Steppenwolf-amp-Siddhartha-by-Ruth-Goode.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981618161816681678166/Best-of-Hermann-Hesse-Der-Steppenwolf-Das-Glasperlenspiel-Briefe-amp-Gedichte-by-Hermann-Hesse.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/881698168816581608169/Puzzles-of-the-Body-The-Labyrinth-in-Kafka-s-Prozess-Hesse-s-Steppenwolf-and-Mann-s-Zauberberg-by-David-Kenosian.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981618161816681618169/STEPPENWOLF---AU-STEPPENWOLF-AU-by-Cae-Swc1589.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981618161816681698169/A-Study-Guide-for-Hermann-Hesse-s-quot-Steppenwolf-quot-by-Gale.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981618161816881608160/Hermann-Hesse-als-Wegweiser-f-r-modernes-Leadership-Verhalten-anhand-des-Werkes-quot-Der-Steppenwolf-quot-by-Claudia-Lorenz.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981618161816681618163/The-Steppenwolf-by-Clifford-Meyer.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981618161816681698164/Zeit--Und-Kulturkritik-in-Hermann-Hesses-Der-Steppenwolf-by-Eduard-Luft.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981618161816881608161/Ameryka-Skie-Zespo-y-Rockowe-Pearl-Jam-Supertramp-Steppenwolf-Garbage-Grateful-Dead-Kansas-Eagles-the-Smashing-Pumpkins-by-Source-Wikipedia.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981618161816781698161/Die-Frage-Der-Identit-t-in-Hermann-Hesses-quot-der-Steppenwolf-quot-by-Anonymous.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981618161816681698163/Magic-Carpet-Ride-The-Autobiography-of-John-Kay-and-Steppenwolf-by-John-Kay.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981618161816881608167/Canadian-Rock-Music-Groups-Nickelback-Steppenwolf-the-Guess-Who-Heart-Bachman-Turner-Overdrive-Moxy-Cancer-Bats-Lighthouse-Prism-by-Source-Wikipedia.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981618161816681618168/Steppenwolf-SparkNotes-Literature-Guide-by-SparkNotes.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/881638160816281638166/ZAYN-MALIK-The-Ultimate-ZAYN-MALIK-Quiz-Book-Find-out-if-you-re-a-true-Zayn-Malik-fan-One-Direction-Quiz-Books-Book-1-by-Jenny-Kellett.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/88163816581608164/The-Genius-Wars-Genius-3-by-Catherine-Jinks.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/281648161816481618163/Girl-Genius-Omnibus-Volume-1-Agatha-Awakens-Girl-Genius-1-3-by-Phil-Foglio.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/1816081678165816181698166/Hermann-Hesse-Gesammelte-werke-by-Hermann-Hesse.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.