Malicious PDF — malware analysis report

Static analysis result for SHA-256 3b7ba41f3a6c7534…

MALICIOUS

PDF

18.1 KB Created: 2019-05-02 01:32:49 +01:00 Authoring application: mPDF 5.7
MD5: 310db477271691a5dd908de819f55d06 SHA-1: bc0caeb5801de5c3f783627ad5d4c2763497d80e SHA-256: 3b7ba41f3a6c753404b6f3d96c3ee6906f2553f599841f65aadb43c84419d0bc
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this PDF as malicious with high confidence. The embedded URLs, although many are marked as benign, are part of a link farm strategy. The primary attack pattern observed is the distribution of numerous external links within the document.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9931

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a00a08a08a03a09a07/Meet-Sailor-Moon-Crystal-by-Naoko-Takeuchi.pdf
    • http://muicuiu.dumb1.com/1a00a08a08a04a03a04/Meet-Sailor-Moon-by-Naoko-Takeuchi.pdf
    • http://muicuiu.dumb1.com/1a00a08a08a04a03a01/Meet-Sailor-Mars-Fire-by-Naoko-Takeuchi.pdf
    • http://muicuiu.dumb1.com/2a07a09a02a01a03/Pretty-Guardian-Sailor-Moon-Vol-9-Pretty-Soldier-Sailor-Moon-Renewal-Edition-9-by-Naoko-Takeuchi.pdf
    • http://muicuiu.dumb1.com/2a07a09a02a01a02/Pretty-Guardian-Sailor-Moon-Vol-12-Pretty-Soldier-Sailor-Moon-by-Naoko-Takeuchi.pdf
    • http://muicuiu.dumb1.com/1a09a03a05a08a03/Sailor-Moon-3-Sailor-Moon-3-by-Naoko-Takeuchi.pdf
    • http://muicuiu.dumb1.com/1a09a03a05a08a01/Sailor-Moon-2-Sailor-Moon-2-by-Naoko-Takeuchi.pdf
    • http://muicuiu.dumb1.com/1a00a08a08a03a09a03/Sailor-Moon-Stars-2-Sailor-Moon-Stars-2-by-Naoko-Takeuchi.pdf
    • http://muicuiu.dumb1.com/1a01a02a07a08a05a02/Sailor-Moon-the-Novels-Mars-Attacks-Sailor-Moon-4-by-Stuart-J-Levy.pdf
    • http://muicuiu.dumb1.com/1a00a08a08a04a09a07/The-Cherry-Project-1-The-Cherry-Project-1-by-Naoko-Takeuchi.pdf
    • http://muicuiu.dumb1.com/1a01a04a05a08a09a03/Manga-of-1992-Sailor-Moon-Boys-Over-Flowers-X-Konpeki-No-Kantai-Zetsuai-1989-Fushigi-Yugi-Marmalade-Boy-Golden-Boy-Wangan-Midnight-H2-by-Books-LLC.pdf
    • http://muicuiu.dumb1.com/2a02a05a02a07a00/Magic-of-Luvelles-Crystal-Moon-2-by-Phillip-E-Jones.pdf
    • http://muicuiu.dumb1.com/1a01a06a00a08a08a04/What-Is-Modernity-Writings-of-Takeuchi-Yoshimi-by-Yoshimi-Takeuchi.pdf
    • http://muicuiu.dumb1.com/2a05a02a07a06a06/Refracted-Crystal-Diamonds-and-Desire-The-Crystal-Fragments-Trilogy-3-by-M-J-Lawless.pdf
    • http://muicuiu.dumb1.com/1a07a00a00a00a02/Fractured-Crystal-Sapphires-and-Submission-The-Crystal-Fragments-Trilogy-1-by-M-J-Lawless.pdf
    • http://muicuiu.dumb1.com/3a04a06a04a09a09/Because-You-ll-Never-Meet-Me-Because-You-ll-Never-Meet-Me-1-by-Leah-Thomas.pdf
    • http://muicuiu.dumb1.com/5a05a09a05a01a07/Zelda-and-the-Crystal-Comb-The-Crystal-Adventures-3-by-R-W-Mitchell.pdf
    • http://muicuiu.dumb1.com/3a00a08a01a01a03/The-Crystal-Warriors-Crystal-1-by-William-R-Forstchen.pdf
    • http://muicuiu.dumb1.com/1a00a08a08a04a02a09/Naoko-by-Hori-Tatsuo.pdf
    • http://muicuiu.dumb1.com/1a00a08a08a03a09a06/Red-Knit-Cap-Girl-by-Naoko-Stoop.pdf
    • http://muicuiu.dumb1.com/1a01a0

Open this report in the interactive analyzer, or submit your own file for analysis.