Malicious PDF — malware analysis report

Static analysis result for SHA-256 3db9a64a71eea9c2…

MALICIOUS

PDF

15.1 KB Created: 2019-06-10 05:14:31 +01:00 Authoring application: mPDF 5.7 First seen: 2021-10-11
MD5: d6ecaa19e35cb0a2dd4fd1d6739f8899 SHA-1: ab757bafafae394943831ad5f063280f3c7a9494 SHA-256: 3db9a64a71eea9c261e0a460e68e39003172dcf48191b699474534cbe63bb6b3
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. These URLs point to various PDF files, suggesting a link farm or a method to distribute malicious content indirectly. The ML classifier also flagged this PDF as malicious with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9778

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/4730738730738736/The-Box-and-the-Dragonfly-The-Keepers-1-by-Ted-Sanders.pdf In PDF document text
    • http://cefasfese.4pu.com/3738730732734733/The-Box-and-the-Dragonfly-The-Keepers-1-by-Ted-Sanders.pdfIn PDF document text
    • http://cefasfese.4pu.com/3739736732732738/The-Keepers-Christmas-in-Salem-The-Keepers-Trilogy-4-by-Heather-Graham.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731731736731737736/Colonel-Harland-Sanders-The-Autobiography-of-the-Original-Celebrity-Chef-by-Harland-Sanders.pdfIn PDF document text
    • http://cefasfese.4pu.com/1737736732730739/The-World-Keepers-Book-2---Roblox-Fantasy-The-World-Keepers-2-by-Ty-The-Hunter.pdfIn PDF document text
    • http://cefasfese.4pu.com/2739738738730735/The-Curse-Keepers-The-Curse-Keepers-1-by-Denise-Grover-Swank.pdfIn PDF document text
    • http://cefasfese.4pu.com/2731734739732733/The-Prophecy-Keepers-The-Prophecy-Keepers-1-by-Melaine-Bryant.pdfIn PDF document text
    • http://cefasfese.4pu.com/1738730732734733/Paranormal-Keepers-Paranormal-Keepers-1-by-Jen-Naumann.pdfIn PDF document text
    • http://cefasfese.4pu.com/1735734739736/Brother-to-a-Dragonfly-by-Will-D-Campbell.pdfIn PDF document text
    • http://cefasfese.4pu.com/3738732738732/Dragonfly-by-Julia-Golding.pdfIn PDF document text
    • http://cefasfese.4pu.com/4732739735738732/Dragonfly-by-Frederic-S-Durbin.pdfIn PDF document text
    • http://cefasfese.4pu.com/1733731734730730/The-Dragonfly-by-Kate-Dunn.pdfIn PDF document text
    • http://cefasfese.4pu.com/4732732735739732/Dragonfly-Song-by-Wendy-Orr.pdfIn PDF document text
    • http://cefasfese.4pu.com/3731735738735733/Dragonfly-by-Andra-Sashner.pdfIn PDF document text
    • http://cefasfese.4pu.com/3731738736734737/Dragonfly-In-Amber-by-Diana-Gabaldon.pdfIn PDF document text
    • http://cefasfese.4pu.com/5733731732732738/The-Dragonfly-of-Chicoutimi-by-Larry-Tremblay.pdfIn PDF document text
    • http://cefasfese.4pu.com/3736735732737732/Dragonfly-in-Amber-Outlander-2-by-Diana-Gabaldon.pdfIn PDF document text
    • http://cefasfese.4pu.com/3731733731733734/Dragonfly-Falling-Shadows-of-the-Apt-2-by-Adrian-Tchaikovsky.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731732730736730731/Dragonfly-in-Amber-Outlander-2-by-Diana-Gabaldon.pdfIn PDF document text
    • http://cefasfese.4pu.com/9736733738736/My-Dragonfly-And-the-Lessons-He-Taught-Me-by-Kathy-Zengolewicz.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.