Malicious PDF — malware analysis report

Static analysis result for SHA-256 3ef2fd2d900e292e…

MALICIOUS

PDF

15.4 KB Created: 2019-04-30 04:13:18 +01:00 Authoring application: mPDF 5.7
MD5: 914f99b99d18d4e6d0e8dc79778d2c14 SHA-1: 2ba55ff2a2f1e881faab2f9809c19ce0e242b72c SHA-256: 3ef2fd2d900e292ec4edc63e6d329df70ebc92193a8ed7dd1b08425fba249556
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While many of these links point to what appear to be legitimate book titles, the sheer volume and the ML_NYX_PDF_MALICIOUS classification suggest a malicious intent, possibly for SEO manipulation or to serve as a lure for further malicious activity. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9880

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/3a02a08a09a01/The-Complete-Anne-of-Green-Gables-Boxed-Set-Anne-of-Green-Gables-1-8-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/5a08a03a09a07a01/Anne-of-Green-Gables-Anne-of-Green-Gables-Series-1-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/5a07a04a01a00a05/Anne-Of-Green-Gables-By-L-M-Montgomery-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/7a03a04a03a07/Anne-of-Green-Gables-Anne-Shirley-Series---The-Complete-Collection-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/4a04a01a09a08a03/The-Anne-Stories-Anne-of-Green-Gables-1-3-5-7-8-Story-Girl-1-2-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/5a02a03a06a06a02/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/1a00a09a09a04a00a06/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/7a00a02a07a06a02/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/4a03a01a04a01a01/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/4a05a00a07a08a07/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/3a01a07a02a09a08/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/3a05a03a01a02a07/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/5a07a04a09a08a05/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/5a07a06a07a00a07/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/5a05a04a03a08a03/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/7a02a00a05a02a01/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/1a06a02a01a07a06/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/3a05a00a03a08a07/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/5a00a04a06a01a09/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/3a01a03a04a05a04/Anne-of-Green-Gables-by-L-M-Montgomery.pdf
    • http://muicuiu.dumb1.com/1a00a09a09a04a00a06/Anne-o

Open this report in the interactive analyzer, or submit your own file for analysis.