Malicious PDF — malware analysis report

Static analysis result for SHA-256 3705b339bbd539f7…

MALICIOUS

PDF

33.7 KB Created: 2019-04-30 04:46:33 +01:00 Authoring application: mPDF 5.7
MD5: 1829feeb68f2849b11314c646c79ed4d SHA-1: fe740cf7a8d279768d5e22ea4fdd1114073f68a2 SHA-256: 3705b339bbd539f790a02174150d35c91cb995b3310591ba59abf20dc4436cf1
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. While many of these URLs were classified as benign, the sheer volume and the ML classifier's high confidence score suggest a malicious intent, likely for SEO manipulation or to distribute further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9651

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/9a08a05a02a04a00/Beschreibung-Des-Jehol-Gebietes-in-Der-Provinz-Chihli-Detail-Studien-in-Chinesischer-Landes-Und-Volkskunde-Mit-Einer-Karte-Und-Sechzehn-Illustrationen-by-O-Franke.pdf
    • http://muicuiu.dumb1.com/9a08a05a01a07a07/Beschreibung-des-Jehol-gebietes-in-der-provinz-Chihli-detail-studien-in-chinesischer-landes--und-volkskunde-mit-einer-karte-und-sechzehn-illustrationen-by-Otto-Franke.pdf
    • http://muicuiu.dumb1.com/1a00a03a03a07a00a06/Bibliotheca-Sinica-Katalog-Einer-Sammlung-Werthvoller-Und-Seltener-Chinesischer-Originalwerke-Bucher-in-Chinesischer-Sprache-in-China-Von-Chinesen-Gedruckt-Und-Verlegt-Mit-Einen-Lithographirten-Verzeichniss-Der-Chines-Originaltitel-Nebst-by-Carl-Theodor-Volcker.pdf
    • http://muicuiu.dumb1.com/9a08a05a01a07a08/Weihnachten-in-Altdeutscher-Malerei-Sechzehn-Gem-lde-Des-15-Und-16-Jahrhunderts-in-Farbiger-Wiedergabe-Mit-Einer-Einf-hrung-by-Hans-Naumann.pdf
    • http://muicuiu.dumb1.com/1a00a03a03a05a09a03/Chinesischer-Film-Tiger-and-Dragon-Tuyas-Hochzeit-Wuxia-Liste-Chinesischer-Trickfilme-Gefahr-Und-Begierde-Die-Kinder-Der-Seidenstrasse-by-Source-Wikipedia.pdf
    • http://muicuiu.dumb1.com/1a00a06a07a01a03a08/Allgemeine-Geschichte-Der-Ver-Staaten-Von-Amerika-Enthaltend-Den-Ganzen-Zeitraum-Seit-Den-Entdeckungen-Bis-Zu-Der-Jetzigen-Zeit-Mit-Einer-Beschreibung-Der-Westlichen-Staaten-Ihres-Bodens-Ihrer-Ansiedelungen-Zunahme-an-Bev-lkerung-U-S-W-In-Drei-by-C-B-Taylor.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a05a01a00/The-WWI-Journals-of-A-G-Franke-by-Don-Franke.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a05a01a02/Ivana-Franke-Retreat-Into-Darkness-by-Ivana-Franke.pdf
    • http://muicuiu.dumb1.com/9a09a05a04a06a08/Uber-Die-Astigmatische-Abbildung-Einer-Unbegrenzten-Ebene-in-Einer-Kugel-Bezuglich-Eines-Festen-Augenpunktes-Inaugural-Dissertation-Zur-Erlangung-Der-Doktorwurde-Einer-Hohen-Philosophischen-Fakultat-Der-Universitat-Rostock-by-Johannes-Bieneck.pdf
    • http://muicuiu.dumb1.com/1a01a06a00a01a01a02/Jahresbericht-ber-Die-K-nigliche-Katholische-Studien-Anstalt-Bei-St-Stephan-in-Augsburg-Im-Studienjahre-1888-89-by-Konigliche-Katholische-Studien-Anstalt.pdf
    • http://muicuiu.dumb1.com/1a01a07a09a00a03a07/Die-Slawen-in-Deutschland-Beitr-ge-Zur-Volkskunde-by-Franz-Tetzner.pdf
    • http://muicuiu.dumb1.com/9a03a07a05a05a08/Rote-Karte-f-r-Traumprinzen-by-Genovefa-Adams.pdf
    • http://muicuiu.dumb1.com/9a03a07a08a06a09/Finnland-500-Jahre-Auf-Der-Karte-Europas-by-Erkki-Fredrikson.pdf
    • http://muicuiu.dumb1.com/9a01a03a02a06a08/Die-Karte-der-geheimen-W-nsche-Map-of-Magic---Die-Weltensegler-1-by-Carrie-Ryan.pdf
    • http://muicuiu.dumb1.com/8a07a00a09a07a07/Middlemarch-e-Studie-ber-d-Leben-in-d-Provinz-by-George-Eliot.pdf
    • http://muicuiu.dumb1.com/9a03a07a09a02a04/Die-Reiskultur-in-Italien-Nebst-Karte-Des-Verbreitungsgebietes-by-Emil-Husmann.pdf
    • http://muicuiu.dumb1.com/1a01a06a04a05a03a02/Im-Kaff-der-guten-Hoffnung-Eine-Liebeserkl-rung-an-die-Provinz-by-Norbert-Molitor.pdf
    • http://muicuiu.dumb1.com/1a01a07a08a09a07a08/Die-Slawen-in-Deutschland-Beitr-ge-zur-Volkskunde-der-Preussen-Litauer-und-Letten-der-Masuren-by-Franz-Tetzner.pdf
    • http://muicuiu.dumb1.com/8a02a00a01a00a01/Walk-re-in-Detmold-Eine-Entdeckungsreise-durch-die-deutsche-Provinz-by-Ralph-Bollmann.pdf
    • http://muicuiu.dumb1.com/2a05a03a06a06a08/Wings-to-Redemption-by-Paul-H-Landes.pdf
    • http://muicuiu.dumb1.com/1a00a03a03a07a00a06/Bibliotheca-Sinica-Katalog-Einer-Sammlung-Werthvoller-Und-Seltener-Chinesischer-Originalwerke-Bucher-in-Chinesischer-Sprache-in-China-Von-Chinesen-Gedruckt-Und-Verlegt-Mit-Einen-Lithographirten-Verzeichniss-Der-Chi

Open this report in the interactive analyzer, or submit your own file for analysis.