Malicious PDF — malware analysis report

Static analysis result for SHA-256 37475d92526884d0…

MALICIOUS

PDF

17.3 KB Created: 2019-05-02 04:45:43 +01:00 Authoring application: mPDF 5.7
MD5: fafcac29cc0fe18f4b5a2c31f0f26e37 SHA-1: c758dcd8d312d4b829ae5fe9efefd22fcd85d42f SHA-256: 37475d92526884d0d5864bae2411cfe90ebaf2033f39983751a639f0a780f539
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO poisoning or to distribute malicious content. The ML classifier strongly indicated maliciousness. While no scripts were extracted, the PDF structure and embedded URLs suggest a malicious intent to redirect users to potentially harmful content hosted on the 'muicuiu.dumb1.com' domain.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/8a00a09a06a07a05/Batman-1940-2011-290-by-David-V-Reed.pdf
    • http://muicuiu.dumb1.com/3a00a08a01a01a08/Batman-1940-2011-1-by-Bill-Finger.pdf
    • http://muicuiu.dumb1.com/1a01a08a01a08a00a05/Batman-1940-2011-458-by-Alan-Grant.pdf
    • http://muicuiu.dumb1.com/1a01a05a06a05a04a09/Batman-1940-2011-459-by-Alan-Grant.pdf
    • http://muicuiu.dumb1.com/8a00a09a06a08a07/Batman-1940-2011-306-by-Gerry-Conway.pdf
    • http://muicuiu.dumb1.com/1a00a00a07a08a09a08/Batman-1940--87-by-William-Woolfolk.pdf
    • http://muicuiu.dumb1.com/1a00a07a01a03a01a00/Esel-2011-Donkeys-2011-nes-2011-by-Hans-Reinhard.pdf
    • http://muicuiu.dumb1.com/7a04a05a05a06a06/Elizabeth-Taylor-The-Lady-the-Lover-the-Legend-1932-2011-by-David-Bret.pdf
    • http://muicuiu.dumb1.com/5a01a01a08a00a07/Electrifying-America-Social-Meanings-of-a-New-Technology-1880-1940-by-David-E-Nye.pdf
    • http://muicuiu.dumb1.com/3a00a07a09a05a04/Batman-Arkham-Reborn-by-David-Hine.pdf
    • http://muicuiu.dumb1.com/3a01a01a06a06a04/Batman-City-of-Crime-by-David-Lapham.pdf
    • http://muicuiu.dumb1.com/8a09a04a00a05a08/The-1st-International-Workshop-on-the-Quality-of-Geodetic-Observation-and-Monitoring-Systems-Qugoms-11-Proceedings-of-the-2011-Iag-International-Workshop-Munich-Germany-April-13-15-2011-by-Hansj-rg-Kutterer.pdf
    • http://muicuiu.dumb1.com/3a00a07a09a09a04/Batman-The-Strange-Deaths-of-Batman-by-Cary-Bates.pdf
    • http://muicuiu.dumb1.com/1a00a05a03a09/Batman-amp-Robin-Batman-Reborn-by-Grant-Morrison.pdf
    • http://muicuiu.dumb1.com/1a01a02a05a04a00a00/Batman-33-New-52-Batman-33-by-Scott-Snyder.pdf
    • http://muicuiu.dumb1.com/8a02a03a01a03a01/Batman-37-New-52-Batman-37-by-Scott-Snyder.pdf
    • http://muicuiu.dumb1.com/8a02a03a05a05a08/Batman-38-New-52-Batman-38-by-Scott-Snyder.pdf
    • http://muicuiu.dumb1.com/1a06a03a09a00a03/Todd-And-Brad-Reed-s-Michigan-Wednesdays-in-the-Mitten-by-Todd-Reed.pdf
    • http://muicuiu.dumb1.com/3a07a01a07a09/Carter-Reed-Carter-Reed-1-by-Tijan.pdf
    • http://muicuiu.dumb1.com/2a03a09a04a05/Batman-Black-and-White-Batman-Black-and-White-1-by-Mark-Chiarello.pdf
    • http://muicuiu.dumb1.com/8a09a04a00a05a08/The-1st-International-Workshop-on-the-Quality-of-Geodetic-Observation-and-Monitoring-Systems-Qugoms-11-Proceedings-of-the-2011-Iag-International-Wor

Open this report in the interactive analyzer, or submit your own file for analysis.