Malicious PDF — malware analysis report

Static analysis result for SHA-256 3364ce68dc2e922f…

MALICIOUS

PDF

13.0 KB Created: 2019-04-30 18:57:02 +01:00 Authoring application: mPDF 5.7
MD5: c94ad98471b07b4d1360fb1e93596d4a SHA-1: 90f1ae8dd3630cfa2fb78ac7e239041975d1577e SHA-256: 3364ce68dc2e922f6cfd5978eaa7410094c3baf021110c79183aaf7640316a12
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of links to external PDF files hosted on the domain 'muicuiu.dumb1.com'. This behavior is indicative of a link farm or a redirection scheme designed to obscure the ultimate destination or to distribute malicious content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9006

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/4a04a03a02a06a05/Hide-and-Seek-Phoenix-Code-3-4-by-Lara-Adrian.pdf
    • http://muicuiu.dumb1.com/1a00a00a08a07a04a07/Cut-and-Run-Phoenix-Code-1-2-by-Lara-Adrian.pdf
    • http://muicuiu.dumb1.com/2a02a01a02a02a05/Hide-and-Seek-Hide-and-Seek-Mystery-Series-1-by-Jennifer-Hayden.pdf
    • http://muicuiu.dumb1.com/1a04a09a01a07a03/Hide-and-Seek-by-Katy-Grant.pdf
    • http://muicuiu.dumb1.com/6a09a07a00a02/Hide-amp-Seek-by-Felicity-Brandon.pdf
    • http://muicuiu.dumb1.com/8a00a06a04a08a07/Hide-And-Seek-by-Marcus-Pfister.pdf
    • http://muicuiu.dumb1.com/2a01a04a08a04a02/Hide-and-Seek-by-James-Patterson.pdf
    • http://muicuiu.dumb1.com/4a08a01a08a09a00/We-Hide-You-Seek-by-Ariane-Dewey.pdf
    • http://muicuiu.dumb1.com/7a04a06a09a01/Hide-and-Seek-by-Jane-McFann.pdf
    • http://muicuiu.dumb1.com/7a00a06a07a01/Hide-and-Seek-Fog-by-Alvin-Tresselt.pdf
    • http://muicuiu.dumb1.com/3a03a07a06a01a09/Hide-And-Seek-The-September-Day-Series-2-by-Amy-Shojai.pdf
    • http://muicuiu.dumb1.com/1a00a09a01a02a02a09/Hide-amp-seek-W-wilma-Worm-by-Demi.pdf
    • http://muicuiu.dumb1.com/4a06a04a04a09a06/Hide-and-Seek-Psy-Changeling-12-2-by-Nalini-Singh.pdf
    • http://muicuiu.dumb1.com/6a07a03a01a03a03/Hide-and-Seek-Vigilance-1-by-Desiree-Holt.pdf
    • http://muicuiu.dumb1.com/1a03a07a05a08a06/A-Game-Of-Hide-And-Seek-by-Elizabeth-Taylor.pdf
    • http://muicuiu.dumb1.com/3a08a03a09a01a06/Hide-and-Seek-DI-Helen-Grace-6-by-M-J-Arlidge.pdf
    • http://muicuiu.dumb1.com/9a09a09a05a06a03/Hide-n-Go-Seek-Paranormale-Visionen-2-by-Dale-Mayer.pdf
    • http://muicuiu.dumb1.com/7a06a07a05a08a03/Harry-And-The-Dinosaurs-Play-Hide-And-Seek-by-Ian-Whybrow.pdf
    • http://muicuiu.dumb1.com/3a02a00a02a04a00/Hide-and-Seek-Family-Reunions-1-by-Lynette-Eason.pdf
    • http://muicuiu.dumb1.com/4a04a09a09a09a04/Hide-n-Go-Seek-Psychic-Visions-2-by-Dale-Mayer.pdf
    • http://muicuiu.dumb1.com/

Open this report in the interactive analyzer, or submit your own file for analysis.