Malicious PDF — malware analysis report

Static analysis result for SHA-256 439e086379f868b5…

MALICIOUS

PDF

26.8 KB Created: 2020-03-15 00:49:10 +00:00 Authoring application: mPDF 5.7
MD5: d4de827b6e9fe4280476b8c2c0c1c583 SHA-1: 2e8bdd545d8dcaaefc3d9194ec74d4fda78422a9 SHA-256: 439e086379f868b514f14a0bb9e917713ff534ccc328d78dcbdc1142e19da264
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded URLs pointing to external PDF documents on a single suspicious domain, indicative of a link farm or redirection scheme. The ML classifier also flagged this PDF as malicious. No scripts were extracted from this sample, and the document body was heavily obfuscated, preventing a deeper analysis of the immediate user-facing content. The primary attack pattern observed is the distribution of malicious links.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9912

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://eascasas.myhome.cx/1aa1aa4aa3aa8aa4aa4/Der-Sieg-des-Kapitals-Wie-der-Reichtum-in-die-Welt-kam-Die-Geschichte-von-Wachstum-Geld-und-Krisen-by-Ulrike-Herrmann.pdf
    • http://eascasas.myhome.cx/8aa9aa7aa8aa0aa1/Nikes-letzter-Sieg-ein-Kurzkrimi-Rattenreiter-Kurzkrimi-5-by-Ulrike-Bliefert.pdf
    • http://eascasas.myhome.cx/1aa1aa0aa1aa1aa0aa7/Geschichte-der-Welt-Wege-zur-modernen-Welt-1750-1870-by-Akira-Iriye.pdf
    • http://eascasas.myhome.cx/9aa8aa4aa7aa8aa8/Twitter-Eine-wahre-Geschichte-von-Geld-Macht-Freundschaft-und-Verrat-by-Nick-Bilton.pdf
    • http://eascasas.myhome.cx/1aa0aa5aa4aa0aa5aa2/-Als-ob-die-Welt-aus-den-Fugen-ginge-Kriegserfahrungen-sterreichisch-ungarischer-Offiziere-1914-18-Krieg-in-der-Geschichte-86-by-Martin-Schmitz.pdf
    • http://eascasas.myhome.cx/9aa6aa1aa5aa1aa1/Lose-Bande-Horst-Martin-Herrmann-Christian-Rothmann-Toni-Wirthmuller-Pomona-Zipser-Die-Ateliergemeinschft-Z-Art-by-Horst-Martin-Herrmann.pdf
    • http://eascasas.myhome.cx/8aa9aa7aa4aa5aa8/Online-Geld-verdienen-ab-dem-ersten-Tag-Deine-Blaupause-f-r-ein-erfolgreiches-Online-Business-das-sofort-Geld-erwirtschaftet-und-niemals-schl-ft-Just-be-free-3-by-Corey-Landis.pdf
    • http://eascasas.myhome.cx/8aa9aa8aa3aa7aa7/Geld-sparen-im-Haushalt---Wie-du-auch-mit-Kindern-durch-simple-Tricks-t-glich-Geld-sparen-kannst-Der-Ratgeber-f-r-Familien-um-am-Ende-des-Monats-mehr-auf-dem-Konto-zu-haben-by-Frauke-Fussel.pdf
    • http://eascasas.myhome.cx/9aa2aa1aa4aa2aa3/Everybody-Talks-About-the-Weather-We-Don-t-The-Writings-of-Ulrike-Meinhof-by-Ulrike-Marie-Meinhof.pdf
    • http://eascasas.myhome.cx/9aa0aa7aa1aa6aa1/Wie-Wird-Grunes-Wachstum-in-Konzernen-Umgesetzt-Und-Wie-Profitieren-Die-Unternehmen-Davon-by-Anonym.pdf
    • http://eascasas.myhome.cx/9aa8aa8aa7aa1aa2/Die-H-rte-der-Reichtum-und-die-Weite-Ein-Heimatfilm-by-Frank-G-hre.pdf
    • http://eascasas.myhome.cx/9aa8aa9aa8aa3aa5/Das-Kapital---Vollst-ndige-Gesamtausgabe-in-3-B-nden-Kritik-der-politischen-konomie-Der-Produktionsproze-des-Kapitals-Der-Zirkulationsproze-des-kapitalistischen-Produktion-by-Karl-Marx.pdf
    • http://eascasas.myhome.cx/2aa4aa1aa1aa1aa0/Sieg-Heil-Iconographers-by-Jon-Farmer.pdf
    • http://eascasas.myhome.cx/1aa1aa1aa2aa9aa7aa4/Die-Acht-S-ulen-des-Reichtums-Eight-Pillars-of-Prosperity-Pers-nlicher-Reichtum-und-Erfolg-1-by-James-Allen.pdf
    • http://eascasas.myhome.cx/1aa0aa0aa3aa7aa6aa9/Klein-Dorrit-Die-Armut-Der-Reichtum-Beide-B-nde-in-einem-Buch-by-Charles-Dickens.pdf
    • http://eascasas.myhome.cx/4aa8aa2aa5aa1aa4/Oh-My-Goddess-Band-19-Wege-zum-Sieg-by-Kosuke-Fujishima.pdf
    • http://eascasas.myhome.cx/9aa3aa2aa7aa9aa8/Was-Heisst-in-Der-Geschichte-Stehen-Eine-Studie-Zum-Verhaltnis-Von-Geschichte-Und-Menschsein-by-Rainer-Hohmann.pdf
    • http://eascasas.myhome.cx/1aa0aa5aa9aa1aa3aa5/Menschheits-Geschichte-Die-Geschichte-der-Menschheit-by-D-Selzer-McKenzie.pdf
    • http://eascasas.myhome.cx/1aa1aa4aa3aa8aa4aa1/Tests-in-Print-by-Oscar-Krisen-Buros.pdf
    • http://eascasas.myhome.cx/1aa1aa4aa3aa8aa3aa9/Konflikte-Und-Krisen-in-Familienunternehmen-by-Steffen-Grossmann.pdf
    • http://eascasas.myhome.cx/1aa0aa5aa4aa0aa5aa2/-Als-ob-die-Welt-aus-den-Fugen-ginge-Kriegserfahrungen-sterreich

Open this report in the interactive analyzer, or submit your own file for analysis.