Malicious PDF — malware analysis report

Static analysis result for SHA-256 3eb2e0f90b564826…

MALICIOUS

PDF

17.4 KB Created: 2019-05-05 14:37:52 +01:00 Authoring application: mPDF 5.7 First seen: 2021-03-01
MD5: b1e936f846a427e7b652ddbb95b60876 SHA-1: 2879b2bea7f4704fa5fd55ca9dba7b6a64eaf574 SHA-256: 3eb2e0f90b56482619eb5d3b52efea45b2affcdf76c5964506de8ae259513b2f
100 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9788

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/2a09a05a01a01a03/Dragon-Slippers-Dragon-Slippers-1-by-Jessica-Day-George.pdf In PDF document text
    • http://muicuiu.dumb1.com/3a03a07a06a04/Dragon-Slippers-Dragon-Slippers-1-by-Jessica-Day-George.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a01a02a01a08a03/Dragon-Flight-Dragon-Slippers-2-by-Jessica-Day-George.pdfIn PDF document text
    • http://muicuiu.dumb1.com/6a07a04a03a00a01/Second-Best-Satin-Slippers-5-by-Elizabeth-Bernard.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a00a05a00a00a03/Ruby-s-Slippers-by-Tricia-Rayburn.pdfIn PDF document text
    • http://muicuiu.dumb1.com/6a07a04a02a08a00/Temptations-Satin-Slippers-7-by-Elizabeth-Bernard.pdfIn PDF document text
    • http://muicuiu.dumb1.com/7a02a01a05a03/Pink-Slips-and-Glass-Slippers-by-J-P-Hansen.pdfIn PDF document text
    • http://muicuiu.dumb1.com/9a05a06a02a07a08/The-Mac-1st-in-the-Sir-William-amp-Mac-Life-Without-Slippers-Series-by-PJ-Gilbers.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a05a06a00a07a06/The-Pink-Ballet-Slippers-by-Evelyn-Solveig-Dehkes.pdfIn PDF document text
    • http://muicuiu.dumb1.com/6a07a08a04a02a07/Cendre-and-the-Glass-Slippers-The-War-of-the-Cinders-1-by-Charles-Z-Doilain.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a00a00a09a09a00a00/Glass-Slippers-Give-You-Blisters-by-Mary-Jane-Auch.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a02a02a03a00a07/Slippers-And-Thieves-Fairy-Tales-of-the-Magicorum-Book-3-by-Christina-Bauer.pdfIn PDF document text
    • http://muicuiu.dumb1.com/8a07a05a02a06a01/G-A-Aiken-Bundle-The-Dragon-Who-Loved-Me-What-a-Dragon-Should-Know-amp-Last-Dragon-Standing-by-G-A-Aiken.pdfIn PDF document text
    • http://muicuiu.dumb1.com/6a02a03a01a00a00/Regards-from-the-Dragon-by-George-Lee.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a00a08a09a03a04a01/Hidden-Dragon-Dragon-Rising-Urban-Fantasy-Series-1-by-Trudi-Jaye.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a09a05a04a09a08/The-Dragon-and-the-Fair-Maid-of-Kent-Dragon-Knight-9-by-Gordon-R-Dickson.pdfIn PDF document text
    • http://muicuiu.dumb1.com/4a01a05a05a08/Dragon-of-Legend-Destiny-Fantasy-Dragon-Adventure-by-Angelika-Meyer.pdfIn PDF document text
    • http://muicuiu.dumb1.com/3a09a01a06a06a02/Dragon-Knight-s-Ring-Order-of-the-Dragon-Knights-5-by-Mary-Morgan.pdfIn PDF document text
    • http://muicuiu.dumb1.com/3a08a04a08a04a08/Book-of-the-Dragon-s-Tooth-An-Ancient-Manuscript-on-the-Secret-History-of-the-Dragon-and-The-by-Michael-Green.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a00a09a09a08a02/The-Pygmy-Dragon-Shapeshifter-Dragon-Legends-1-by-Marc-Secchia.pdfIn PDF document text