Malicious PDF — malware analysis report

Static analysis result for SHA-256 3c65631b6d35c775…

MALICIOUS

PDF

18.5 KB Created: 2019-05-01 18:48:27 +01:00 Authoring application: mPDF 5.7
MD5: 80711951aa63434ec02dcc93aa1be3f4 SHA-1: 5453eb550b37d72fa82a836a89351e1f21995db0 SHA-256: 3c65631b6d35c7759ff13421c8ba01f0e47835c7a35258473447e474d2ae81e8
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of external links, forming a link farm. The ML classifier strongly indicated maliciousness. The primary attack pattern involves directing users to a multitude of external PDF documents hosted on kiteeearpdf.myhome.cx, likely as a lure or to distribute further malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://kiteeearpdf.myhome.cx/2f213f212f210f218/The-Diary-of-Anne-Frank-And-Related-Readings-by-Frances-Goodrich.pdf
    • http://kiteeearpdf.myhome.cx/2f212f219f216f216f212/Study-Guide-For-Anne-Frank-Remembered-The-Story-Of-The-Woman-Who-Helped-To-Hide-The-Frank-Family-With-Related-Readings-by-Miep-Gies.pdf
    • http://kiteeearpdf.myhome.cx/4f217f214f212f217f213/Anne-Frank-The-Diary-of-a-Young-Girl-by-Anne-Frank-translated-by-B-M-Mooyaart-Doubleday-Summary-amp-Study-Guide-by-BookRags.pdf
    • http://kiteeearpdf.myhome.cx/9f212f217f210f212f215/Diary-of-Anne-Frank-in-Dari-Persian-or-Farsi-by-Anne-Frank.pdf
    • http://kiteeearpdf.myhome.cx/5f215f214f215f210f214/The-Diary-of-Anne-Frank-The-Revised-Critical-Edition-by-Anne-Frank.pdf
    • http://kiteeearpdf.myhome.cx/1f218f216f213f215f218/Anne-Frank-The-Diary-of-a-Young-Girl-by-Anne-Frank.pdf
    • http://kiteeearpdf.myhome.cx/2f212f219f210f215f214/Anne-Frank-Her-life-in-words-and-pictures-from-the-archives-of-The-Anne-Frank-House-by-Menno-Metselaar.pdf
    • http://kiteeearpdf.myhome.cx/9f218f213f212f211/The-Frank-Diary-of-Anne-by-Dan-Dillard.pdf
    • http://kiteeearpdf.myhome.cx/9f218f211f217f214/The-Diary-of-a-Young-Girl-by-Anne-Frank.pdf
    • http://kiteeearpdf.myhome.cx/5f214f219f218f219f217/The-Diary-of-Anne-Frank-by-Charles-Nicholas.pdf
    • http://kiteeearpdf.myhome.cx/7f219f215f215f217f214/The-Diary-of-a-Young-Girl-by-Anne-Frank.pdf
    • http://kiteeearpdf.myhome.cx/6f217f213f216f219f216/The-Diary-of-a-Young-Girl-by-Anne-Frank.pdf
    • http://kiteeearpdf.myhome.cx/5f215f210f217f210f216/The-Diary-of-a-Young-Girl-by-Anne-Frank.pdf
    • http://kiteeearpdf.myhome.cx/3f212f213f217f212/The-Diary-of-a-Young-Girl-by-Anne-Frank.pdf
    • http://kiteeearpdf.myhome.cx/2f214f210f217f217f214/The-Diary-of-a-Young-Girl-by-Anne-Frank.pdf
    • http://kiteeearpdf.myhome.cx/2f212f219f216f215f211/The-Story-Of-Anne-Frank-by-Anne-Frank-House.pdf
    • http://kiteeearpdf.myhome.cx/8f212f217f213f213f217/The-Diary-of-a-Young-Girl---Class-X-by-Anne-Frank.pdf
    • http://kiteeearpdf.myhome.cx/4f214f210f212f212f210/Anne-Frank-In-The-World-1929-1945-De-Wereld-Van-Anne-Frank-1929-1945-by-Joke-Kniesmeyer.pdf
    • http://kiteeearpdf.myhome.cx/5f215f212f212f219f219/The-Works-of-Anne-Frank-by-Anne-Frank.pdf
    • http://kiteeearpdf.myhome.cx/6f218f210f211f214f210/El-diario-de-Ana-Frank-Biling-e-by-Anne-Frank.pdf
    • http://kiteeearpdf.myhome.cx/9f212f217f210

Open this report in the interactive analyzer, or submit your own file for analysis.