Malicious PDF — malware analysis report

Static analysis result for SHA-256 2fbc0ba629364557…

MALICIOUS

PDF

22.6 KB Created: 2020-02-05 10:19:32 +00:00 Authoring application: mPDF 5.7
MD5: bdd8b73f22e5d5cdcc527d06d490ba78 SHA-1: 7ace3e89f5c412419a091850d67fc9ed5e2b5ea6 SHA-256: 2fbc0ba62936455716da2b4367808f37b274e96d271f3477dfe2d1806d864a64
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links to external PDF files, a technique commonly used for SEO poisoning or to create link farms. The ML classifier strongly indicated maliciousness. The primary attack pattern involves directing users to a suspicious domain hosting numerous documents, likely to manipulate search engine results or distribute further malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://eascasas.myhome.cx/9aa5aa8aa9aa3aa1/Verr-ter-m-ssen-sterben-N-Y-D---New-York-Detectives-by-Hans-J-rgen-Raben.pdf
    • http://eascasas.myhome.cx/1aa1aa9aa3aa3aa3aa2/Bount-Reiniger-und-die-Todesfalle-N-Y-D---New-York-Detectives-Cassiopeiapress-Krimi-by-Hans-J-rgen-Raben.pdf
    • http://eascasas.myhome.cx/9aa9aa4aa2aa2aa3/N-Y-D---Die-Killer-Kobra-New-York-Detectives-by-A-F-Morland.pdf
    • http://eascasas.myhome.cx/1aa1aa2aa0aa6aa1aa5/Wer-mit-M-rdern-paktiert-N-Y-D---New-York-Detectives-by-Wolf-G-Rahn.pdf
    • http://eascasas.myhome.cx/1aa0aa4aa0aa7aa7aa4/Bount-Reiniger-stellt-eine-Falle-New-York-Detectives-by-Wolf-G-Rahn.pdf
    • http://eascasas.myhome.cx/5aa2aa1aa2aa9aa1/Reasonable-Democracy-J-rgen-Habermas-and-the-Politics-of-Discourse-by-Simone-Chambers.pdf
    • http://eascasas.myhome.cx/1aa0aa5aa1aa0aa6aa1/Filmzensur-Und--Politik-in-Der-Ddr-Untersuchung-an-Ausgew-hlten-Filmen-Von-J-rgen-B-ttcher-in-Den-Sechziger-Jahren-by-Astrid-Hartmann.pdf
    • http://eascasas.myhome.cx/1aa0aa1aa4aa5aa0aa9/Fressen-ihn-die-Raben-by-Volker-Streiter.pdf
    • http://eascasas.myhome.cx/5aa8aa5aa5aa6/Der-Kuss-des-Raben-by-Antje-Babendererde.pdf
    • http://eascasas.myhome.cx/9aa9aa7aa3aa1aa4/Die-Raben-am-Flu-und-in-den-Bergen-by-Harald-G-ndel.pdf
    • http://eascasas.myhome.cx/1aa0aa1aa4aa6aa8aa1/Das-Haus-Zamis-34---Sonst-fressen-dich-die-Raben-by-Susanne-Wilhelm.pdf
    • http://eascasas.myhome.cx/8aa8aa2aa5aa4aa1/Homo-Sapiens-Und-Homo-Faber-Epistemische-Und-Technische-Rationalit-t-in-Antike-Und-Gegenwart-Festschrift-F-r-J-rgen-Mittelstra-by-Gereon-Wolters.pdf
    • http://eascasas.myhome.cx/9aa8aa3aa9aa2aa5/Der-Von-Mose-U-Denen-Propheten-bel-Urtheilende-Alchymist-Wird-F-rgestellet-in-Einer-Schrifft-Gem-ssen-Erweisung-Da-Moses-Und-Einige-Propheten-Wie-Auch-David-Salomon-Hiob-Esra-Und-Dergleichen-Keine-Adepti-Lapidis-Philosophorum-Gewesen-Sind-by-Johann-Georg-Schmidt.pdf
    • http://eascasas.myhome.cx/1aa1aa6aa4aa3aa7aa0/Das-Sterben-in-Wychwood-by-Agatha-Christie.pdf
    • http://eascasas.myhome.cx/9aa5aa5aa2aa5aa4/Am-Freitag-wirst-du-sterben-by-M-C-Leonhard.pdf
    • http://eascasas.myhome.cx/1aa0aa7aa1aa4aa0aa2/Der-Mann-der-auf-das-Sterben-wartet-by-Elisabeth-von-sydow.pdf
    • http://eascasas.myhome.cx/1aa0aa6aa2aa2aa9aa7/Gentlemen-of-New-York---S-ndig-wie-Silber-Roman-New-York-Trilogie-3-by-Joanna-Shupe.pdf
    • http://eascasas.myhome.cx/8aa2aa1aa5aa0aa9/Index-of-Wills-in-the-York-Registry-1620-to-1627-by-York-England-.pdf
    • http://eascasas.myhome.cx/9aa4aa6aa7aa6aa1/Blutige-Spur-CSI-New-York-Bd-2-Blood-on-the-Sun-CSI-New-York-Book-2-by-Stuart-M-Kaminsky.pdf
    • http://eascasas.myhome.cx/1aa0aa8aa1aa5aa3aa9/New-York-New-York-Masterworks-of-a-Street-Peddler-George-Forss-by-David-Douglas-Duncan.pdf
    • http://eascasas.myhome.cx/1aa0aa5aa1aa0aa6aa1/Filmzensur-Und--Politik-in-Der-Ddr-Unter

Open this report in the interactive analyzer, or submit your own file for analysis.