Malicious PDF — malware analysis report

Static analysis result for SHA-256 3eb868e27a0b9e2b…

MALICIOUS

PDF

16.8 KB Created: 2019-05-02 11:32:10 +01:00 Authoring application: mPDF 5.7 First seen: 2021-03-01
MD5: 767f29a551c464bd61f6b23402155588 SHA-1: 7e900efb9f9ecd1814cee5761098472e1f3680e6 SHA-256: 3eb868e27a0b9e2b9de82e5fb9f26bd9a94fbe18bfcb17123649b2ccfd131dc9
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/2730735733738734/An-Evil-Spirit-Out-of-the-West-Egyptian-Mysteries-1-by-Paul-Doherty.pdf In PDF document text
    • http://cefasfese.4pu.com/3732732735731734/The-Straw-Men-Sorrowful-Mysteries-of-Brother-Athelstan-12-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/3732732736734734/Candle-Flame-The-Sorrowful-Mysteries-of-Brother-Athelstan-13-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/2735736730732738/Murder-Most-Holy-The-Sorrowful-Mysteries-of-Brother-Athelstan-3-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/4736732735733738/The-Mansions-of-Murder-The-Sorrowful-Mysteries-of-Brother-Athelstan-18-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/1735732730739733/The-Death-of-a-King-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/4736731735737732/The-Templar-Templars-1-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/8734734731734/The-Rose-Demon-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/4738738730736737/The-Horus-Killings-Amerotke-2-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/1734733735735736/The-Poisoner-of-Ptah-Amerotke-6-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/3732730735736739/The-Horus-Killings-Amerotke-2-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/3732730738733734/The-Slayers-of-Seth-Amerotke-4-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/4732735731735731/Isabella-and-the-Strange-Death-of-Edward-II-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/3732730735737731/The-Devil-s-Hunt-Hugh-Corbett-10-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/4734738734737735/Murder-Imperial-Ancient-Rome-2-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/3732732736734732/The-Demon-Archer-Hugh-Corbett-11-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/3732732733736736/Murder-Wears-a-Cowl-Hugh-Corbett-6-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/3733739735737738/The-White-Rose-Murders-Sir-Roger-Shallot-1-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/2736738733738735/The-Hangman-s-Hymn-Stories-told-on-Pilgrimage-from-London-to-Canterbury-5-by-Paul-Doherty.pdfIn PDF document text
    • http://cefasfese.4pu.com/4738736735732730/Sidney-Chambers-and-the-Problem-of-Evil-The-Grantchester-Mysteries-3-by-James-Runcie.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.