Malicious PDF — malware analysis report

Static analysis result for SHA-256 3eebe51bba93aec9…

MALICIOUS

PDF

17.2 KB Created: 2019-04-30 05:14:00 +01:00 Authoring application: mPDF 5.7
MD5: 38028555783039aeee0b46cdca984a1f SHA-1: 217a348fbbea498856cb3566fe39c6cffa18ef6b SHA-256: 3eebe51bba93aec9d8fadacd95e7377289c7c6df956050180f401fe416a8ea49
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files hosted on the domain 'muicuiu.dumb1.com'. This behavior is indicative of a link farm or a lure to a malicious site, as flagged by the PDF_SEO_LINK_FARM heuristic. The ML classifier also strongly indicated maliciousness. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9787

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/3a07a07a03a07/Why-Not-World-by-Alexei-Maxim-Russell.pdf
    • http://muicuiu.dumb1.com/6a04a06a09a06/Forgotten-Lore-Volume-I-by-Alexei-Maxim-Russell.pdf
    • http://muicuiu.dumb1.com/4a02a02a08a07/Trueman-Bradley---Aspie-Detective-by-Alexei-Maxim-Russell.pdf
    • http://muicuiu.dumb1.com/4a02a00a00a03/Instruction-Manual-for-the-21st-Century-Samurai-by-Alexei-Maxim-Russell.pdf
    • http://muicuiu.dumb1.com/3a02a07a03a09a00/Tweakerville-Life-and-Death-in-Hawaii-s-Ice-World-A-Novel-by-Alexei-Melnick.pdf
    • http://muicuiu.dumb1.com/3a04a03a09a00a06/The-Collected-Short-Stories-of-Maxim-Gorky-by-Maxim-Gorky.pdf
    • http://muicuiu.dumb1.com/9a09a08a06a06a01/Collected-Works-of-Maxim-Gorky-by-Maxim-Gorky.pdf
    • http://muicuiu.dumb1.com/9a07a00a07a00a09/Bombing-of-Konigsberg-in-World-War-II-by-Jesse-Russell.pdf
    • http://muicuiu.dumb1.com/4a05a07a03a05a06/World-Without-End-Moontide-and-Magic-Rise-1-by-Sean-Russell.pdf
    • http://muicuiu.dumb1.com/5a03a03a09a07/Across-the-Face-of-the-World-Fire-of-Heaven-1-by-Russell-Kirkpatrick.pdf
    • http://muicuiu.dumb1.com/4a04a06a06a03a08/Historic-Photos-of-the-Chicago-World-s-Fair-by-Russell-Lewis.pdf
    • http://muicuiu.dumb1.com/4a02a02a09a07a03/Interactive-Romans-Road---World-English-Version-by-Russell-Sherrard.pdf
    • http://muicuiu.dumb1.com/1a09a01a03a01a08/God-and-Gold-Britain-America-and-the-Making-of-the-Modern-World-by-Walter-Russell-Mead.pdf
    • http://muicuiu.dumb1.com/1a00a02a07a06a02/The-Boom-How-Fracking-Ignited-the-American-Energy-Revolution-and-Changed-the-World-by-Russell-Gold.pdf
    • http://muicuiu.dumb1.com/3a03a03a01a01a02/The-Year-of-Living-Danishly-Uncovering-the-Secrets-of-the-World-s-Happiest-Country-by-Helen-Russell.pdf
    • http://muicuiu.dumb1.com/9a02a03a08a02a09/Searching-For-You-by-Glenn-Alexei.pdf
    • http://muicuiu.dumb1.com/4a05a03a09a05a07/Finding-Alexei-by-Kendall-Ryan.pdf
    • http://muicuiu.dumb1.com/2a05a00a09a00/Rite-of-Passage-by-Alexei-Panshin.pdf
    • http://muicuiu.dumb1.com/6a07a07a05a06a08/The-French-Corsairs-by-Edward-Frederick-Langley-Russell-Russell-of-Liverpool.pdf
    • http://muicuiu.dumb1.com/4a02a08a06a00a04/Alexei-Her-Russian-Protector-8-by-Roxie-Rivera.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.