PDF malware analysis — malicious · 321883f4bb9b14e3

MALICIOUS

PDF

52.6 KB Created: 2020-12-22 12:16:16 +02:00 Authoring application: wkhtmltopdf 0.12.5 (via Qt 4.8.7)

MD5: b3f18ee3a1a94fb0710ebbdc29f4a42a SHA-1: b0f5fc1777aec11b967e4e9d939f943e6b7cd105 SHA-256: 321883f4bb9b14e3ca43de0af6a430d0d944913013938bef22eb52e4f23b18fa

94 Risk Score

Malware Insights

MITRE ATT&CK

T1566.001 Spearphishing Attachment

The file is identified as malicious by ML classifiers and ClamAV, with a high risk score. It contains an embedded URI pointing to a suspicious domain, likely intended to trick the user into visiting a phishing or malware distribution site. The document body, though heavily obfuscated, suggests a lure related to recipes.

Machine Learning

Nyx PDF Classifier malicious score 0.8773

Heuristics 3

ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
External URI info PDF_URI

PDF contains an external URL action
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL https://trafffi.ru/strik?utm_term=nutri+ninja+green+smoothie+recipes
- https://static.s123-cdn-static.com/uploads/4447640/normal_5fce696fa0554.pdf
- https://jatorogerujew.weebly.com/uploads/1/3/2/7/132710569/a63fb.pdf
- https://cdn-cms.f-static.net/uploads/4483088/normal_5faa54d0a9435.pdf
- https://cdn-cms.f-static.net/uploads/4473388/normal_5fd28cf3c3637.pdf
- https://cdn-cms.f-static.net/uploads/4478430/normal_5fb267f52bd1b.pdf
- https://s3.amazonaws.com/sinadi/blackpink_forever_young.pdf
- https://static1.squarespace.com/static/5fc15d59403f5353fd98fe44/t/5fc805546a2bd913a54f16cd/1606944084992/68692359103.pdf
- https://s3.amazonaws.com/tefelaj/alfit_app_android.pdf
- https://s3.amazonaws.com/mefovu/kewomivemanakuxage.pdf
- https://static1.squarespace.com/static/5fc713abaa0dc1643a2f70df/t/5fd65c98dca221526040faf7/1607883928749/zuwanodimopazadawosujor.pdf
- https://s3.amazonaws.com/julexekubaj/20096786927.pdf
- https://s3.amazonaws.com/jadere/xhubs_download_apk_pc.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.