Malicious PDF — malware analysis report

Static analysis result for SHA-256 31c7b230aac0b894…

MALICIOUS

PDF

17.0 KB Created: 2020-03-15 00:50:51 +00:00 Authoring application: mPDF 5.7
MD5: 867331936cf27aeaec53e287a1ae0d4a SHA-1: f99e7baea2899ca9f05ccbc5b3133e659655efc1 SHA-256: 31c7b230aac0b8944d45405f20fa7e3626e89b69cf524dbc0516ef821bd1f0ae
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded URLs pointing to external PDF files, a technique commonly used for SEO poisoning or to distribute malicious content. The ML classifier strongly indicated maliciousness. No scripts were extracted, but the sheer volume of suspicious links suggests a malicious intent to redirect users to potentially harmful content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://eascasas.myhome.cx/3aa5aa9aa8aa7aa5/The-Closer-Men-Out-of-Uniform-14-by-Rhonda-Nelson.pdf
    • http://eascasas.myhome.cx/2aa2aa2aa8aa2aa6/The-Keeper-by-Rhonda-Nelson.pdf
    • http://eascasas.myhome.cx/3aa6aa0aa1aa1aa7/The-Maverick-by-Rhonda-Nelson.pdf
    • http://eascasas.myhome.cx/2aa2aa7aa7aa2aa6/The-Sex-Diet-Harlequin-Blaze-140-by-Rhonda-Nelson.pdf
    • http://eascasas.myhome.cx/3aa0aa6aa0aa7aa9/The-Soldier-McPherson-Brothers-2-by-Rhonda-Nelson.pdf
    • http://eascasas.myhome.cx/1aa1aa7aa8aa1aa6aa9/Wenn-es-wirklich-Liebe-ist-Sinnlich-und-verboten-s-Darf-ein-Boss-so-z-rtlich-sein-by-Rhonda-Nelson.pdf
    • http://eascasas.myhome.cx/3aa3aa7aa8aa5aa9/Nelson-De-Mille-Classics-Three-Book-Set-The-Lion-s-Game-Plum-Island-The-Charm-School-by-Nelson-DeMille.pdf
    • http://eascasas.myhome.cx/4aa3aa1aa5aa7aa6/Mike-Nelson-s-Movie-Megacheese-by-Michael-J-Nelson.pdf
    • http://eascasas.myhome.cx/9aa5aa0aa5aa5aa7/The-Salami-Cutters-of-Washington-Heights---Nelson-s-Kosher-Delicatessen-amp-Restaurant-A-Collection-of-True-and-Somewhat-Embellished-Stories-of-the-Family-Business-by-Norman-Nelson.pdf
    • http://eascasas.myhome.cx/2aa0aa7aa1aa2aa9/A-Little-Bit-of-Hot-Out-of-Uniform-9-5-by-Elle-Kennedy.pdf
    • http://eascasas.myhome.cx/4aa1aa3aa3aa3aa4/The-Last-Uniform-Vol-2-by-Mera-Hakamada.pdf
    • http://eascasas.myhome.cx/9aa1aa5aa1aa5/Nelson-Mandela-by-Kadir-Nelson.pdf
    • http://eascasas.myhome.cx/2aa0aa0aa0aa9/Gays-in-Uniform-by-Kate-Dyer.pdf
    • http://eascasas.myhome.cx/2aa5aa9aa7aa0aa4/The-Heat-is-On-Out-of-Uniform-6-by-Elle-Kennedy.pdf
    • http://eascasas.myhome.cx/3aa9aa6aa3aa1aa7/Lust-in-Uniform-by-Alli-Nicole.pdf
    • http://eascasas.myhome.cx/4aa1aa9aa3aa0aa0/Squared-Away-Out-of-Uniform-5-by-Annabeth-Albert.pdf
    • http://eascasas.myhome.cx/4aa1aa9aa5aa9aa6/On-Point-Out-of-Uniform-3-by-Annabeth-Albert.pdf
    • http://eascasas.myhome.cx/1aa7aa9aa7aa8aa7/White-Hot-Men-in-Uniform-2-by-Nina-Bruhns.pdf
    • http://eascasas.myhome.cx/1aa6aa2aa0aa7aa8/Operation-Uniform-Echo-book-5-by-D-J-Stutley.pdf
    • http://eascasas.myhome.cx/1aa1aa6aa9aa1aa9/Big-Guns-Out-of-Uniform-B-A-D-Agency-0-25-by-Sherrilyn-Kenyon.pdf
    • http://eascasas.myhome.cx/9aa5aa0aa5aa5aa7/The-Salami-Cutters-of-Washington-Heig

Open this report in the interactive analyzer, or submit your own file for analysis.