Malicious PDF — malware analysis report

Static analysis result for SHA-256 3ed2e2ea9d4c50c8…

MALICIOUS

PDF

20.9 KB Created: 2019-06-05 06:51:13 +01:00 Authoring application: mPDF 5.7 First seen: 2021-06-28
MD5: edc98744b6ef7e0bc1e0e2a40d4d51f0 SHA-1: 9ad1e249a4937b144fd384fb0b0bc7e913b72349 SHA-256: 3ed2e2ea9d4c50c857f57b0692f543544b4d91557e5648bc1d2633b7f7ec2a2e
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, forming a link farm. This heuristic suggests the document's primary purpose is to redirect users to external content, likely as part of a phishing or spam campaign. No scripts were extracted, and the document body was heavily obfuscated, preventing further analysis of its specific intent beyond link distribution.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9924

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/1731734734735735737/100-years-of-baseball-by-David-Nemec.pdf In PDF document text
    • http://cefasfese.4pu.com/1731734734736734737/The-Ultimate-New-York-Yankees-Baseball-Challenge-by-David-Nemec.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731734734736730738/The-Great-American-Baseball-Team-Book-by-David-Nemec.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731734734735735732/The-Great-Encyclopedia-of-Nineteenth-Century-Major-League-Baseball-by-David-Nemec.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731734734735734739/The-Great-19th-Century-Encyclopedia-of-Major-League-Baseball-by-David-Nemec.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731734734735734738/100-Years-of-Major-League-Baseball-American-and-National-Leagues-1901-2000-by-David-Nemec.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731734734736731731/Major-League-Baseball-Profiles-1871-1900-Volume-1-The-Ballplayers-Who-Built-the-Game-by-David-Nemec.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731734734735736738/1001-Fascinating-Baseball-Facts-Facts-Records-Anecdotes-Quotes-Lore-And-More-by-David-Nemec.pdfIn PDF document text
    • http://cefasfese.4pu.com/4732736732738730/The-Baseball-Encyclopedia-The-Complete-and-Definitive-Record-of-Major-League-Baseball-by-David-Prebenna.pdfIn PDF document text
    • http://cefasfese.4pu.com/4732736737739731/Baseball-Is-Just-Baseball-The-Understated-Ichiro-by-David-Shields.pdfIn PDF document text
    • http://cefasfese.4pu.com/6739732739737734/Official-Rules-of-Life-by-Seth-Godin.pdfIn PDF document text
    • http://cefasfese.4pu.com/7730737730738730/Playing-Without-Rules-Men-of-Spring-Baseball-1-by-Rachelle-Ayala.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731734734736734735/Who-s-Dicing-the-Daughters-of-Pan-by-David-Nemec.pdfIn PDF document text
    • http://cefasfese.4pu.com/4734731731736732/KISS-Behind-the-Mask-The-Official-Authorized-Biography-by-David-Leaf.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730735731732730739/Assassin-s-Creed-Prima-Official-Game-Guide-by-David-Hodgson.pdfIn PDF document text
    • http://cefasfese.4pu.com/1732734737736733/Elder-Scrolls-V-Skyrim-Revised-amp-Expanded-Prima-Official-Game-Guide-by-David-Hodgson.pdfIn PDF document text
    • http://cefasfese.4pu.com/2734734737734733/The-Christmas-She-Rules-David-s-House-4-by-Jennifer-Leeland.pdfIn PDF document text
    • http://cefasfese.4pu.com/1739731736733731/The-Baseball-Talmud-The-Definitive-Position-by-Position-Ranking-of-Baseball-s-Chosen-Players-by-Howard-Megdal.pdfIn PDF document text
    • http://cefasfese.4pu.com/9738738739731735/Cam-Jansen-and-the-Mystery-of-the-Babe-Ruth-Baseball-Cam-Jansen-Mysteries-6-by-David-A-Adler.pdfIn PDF document text
    • http://cefasfese.4pu.com/4732737730730738/Baseball-in-41-a-Celebration-of-the-quot-Best-Baseball-Season-Ever-quot-by-Robert-W-Creamer.pdfIn PDF document text