Malicious PDF — malware analysis report

Static analysis result for SHA-256 425ae096ca9b8756…

MALICIOUS

PDF

18.8 KB Created: 2020-03-18 16:39:43 +00:00 Authoring application: mPDF 5.7
MD5: 00d5d1efadbeeba2198668f1d86bfa1b SHA-1: d355087f4334078bac7a62499086924edd1130d6 SHA-256: 425ae096ca9b875631bb41648e93e63846887128f580888119b2a43a593b63b8
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified as a link farm. The ML classifier also flagged the document as malicious. The primary attack pattern involves directing users to a multitude of external PDF files, likely for SEO manipulation or to host further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9775

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://easckaolp.myhome.cx/3842848845845842/The-Whole-Tooth-More-Humorous-and-Sometimes-Touching-Tales-from-a-Globe-Trotting-Dentist-s-Storied-Life-Tooth-Is-Stranger-Than-Fiction-Book-2-by-Carroll-James.pdf
    • http://easckaolp.myhome.cx/9845849849844846/Master-the-Art-of-Brushing-and-Flossing-with-the-Wisdom-Tooth-Academy-Workbook-amp-Journal-Taught-By-Drumroll-Please-Tallulah-the-Tooth-Fairy-by-Tina-Renee-Cambio.pdf
    • http://easckaolp.myhome.cx/1848845840842846/The-Tooth-Book-by-Theo-LeSieg.pdf
    • http://easckaolp.myhome.cx/1841844845845844/Mission-Baby-Tooth-Book-2-by-Carol-Bates-Hutchinson.pdf
    • http://easckaolp.myhome.cx/7841843845845845/Tooth-Bandits-A-Branches-Book-Stella-and-the-Night-Sprites-2-by-Sam-Hay.pdf
    • http://easckaolp.myhome.cx/8844846846848849/Bruce-s-Loose-Tooth-Fun-with-a-Moose-and-a-Goose-A-Hallmark-Play-Time-Book-by-Eileen-Landay.pdf
    • http://easckaolp.myhome.cx/7845844843/The-Food-Explorer-The-True-Adventures-of-the-Globe-Trotting-Botanist-Who-Transformed-What-America-Eats-by-Daniel-Stone.pdf
    • http://easckaolp.myhome.cx/1848840848841844/Tooth-by-Tatyana-Fagerjord.pdf
    • http://easckaolp.myhome.cx/2843841849842842/With-Tooth-And-Claw-by-Jim-Goforth.pdf
    • http://easckaolp.myhome.cx/4849842840849848/Sweet-Tooth-by-Ian-McEwan.pdf
    • http://easckaolp.myhome.cx/6840840845847844/No-Tooth-No-Quarter-by-Jon-Buller.pdf
    • http://easckaolp.myhome.cx/3840845846845846/Sweet-Tooth-by-Ian-McEwan.pdf
    • http://easckaolp.myhome.cx/4848846846840848/The-Story-of-the-Tooth-Fairy-by-Tom-Paxton.pdf
    • http://easckaolp.myhome.cx/4848843846844841/Tooth-and-Nail-by-Jennifer-Safrey.pdf
    • http://easckaolp.myhome.cx/9843841841843847/Split-Tooth-by-Tanya-Tagaq.pdf
    • http://easckaolp.myhome.cx/4841843843847844/The-Tooth-Fairy-by-Graham-Joyce.pdf
    • http://easckaolp.myhome.cx/8843847842847843/Tooth-and-Claw-by-T-Coraghessan-Boyle.pdf
    • http://easckaolp.myhome.cx/3841841849848847/The-Tooth-Fairies-by-Belinda-Richman.pdf
    • http://easckaolp.myhome.cx/2847848844843848/Tooth-and-Claw-by-Annmarie-McKenna.pdf
    • http://easckaolp.myhome.cx/2849847841840846/Sweet-Tooth-by-Philip-Ellis.pdf
    • http://easckaolp.myhome.cx/1848845840842846/The-Tooth-Book-by-T

Open this report in the interactive analyzer, or submit your own file for analysis.