Malicious PDF — malware analysis report

Static analysis result for SHA-256 44597078438eafbc…

MALICIOUS

PDF

19.4 KB Created: 2019-04-30 05:39:18 +01:00 Authoring application: mPDF 5.7 First seen: 2021-06-13
MD5: b63b26d85c923be030d55d994a98ca15 SHA-1: 9badb40a6b0ebfe561449b3e17b0f9ebcf5cb73b SHA-256: 44597078438eafbc652f5c0415298f2499b00db4fe45d3f33f86c6572596ac44
100 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, forming a link farm, which is a common tactic for SEO poisoning or distributing malicious content. The ML classifier strongly flagged this PDF as malicious, and the presence of a "download button" heuristic further supports a malicious intent to trick users into downloading files. No scripts were extracted, but the structure suggests a potential for JavaScript exploitation if the PDF were interactive.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a03a02a06a06a03/The-Famous-and-the-Dead-Charlie-Hood-6-by-T-Jefferson-Parker.pdf In PDF document text
    • http://muicuiu.dumb1.com/1a00a04a09a02a03/The-Renegades-Charlie-Hood-2-by-T-Jefferson-Parker.pdfIn PDF document text
    • http://muicuiu.dumb1.com/3a00a05a01a01a09/Every-Dead-Thing-Charlie-Parker-1-by-John-Connolly.pdfIn PDF document text
    • http://muicuiu.dumb1.com/7a01a08a09a06a07/Charlie-Parker---Omnibook-For-Bass-Clef-Instruments-by-Charlie-Parker.pdfIn PDF document text
    • http://muicuiu.dumb1.com/7a01a08a09a05a01/Charlie-Parker-Omnibook-For-C-Instruments-by-Charlie-Parker.pdfIn PDF document text
    • http://muicuiu.dumb1.com/3a07a05a06a04a04/Charlie-Dead-and-the-Seeds-of-Zombie-Chaos-Charlie-Dead-2-by-Geoff-Camphire.pdfIn PDF document text
    • http://muicuiu.dumb1.com/3a05a06a06a05a09/Laguna-Heat-by-T-Jefferson-Parker.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a07a00a04a01/Red-Light-Merci-Rayborn-2-by-T-Jefferson-Parker.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a06a06a06a07a07/Black-Water-Merci-Rayborn-3-by-T-Jefferson-Parker.pdfIn PDF document text
    • http://muicuiu.dumb1.com/4a03a04a09a09a00/Deadly-Gamble-Charlie-Parker-1-by-Connie-Shelton.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a07a06a05a04a08/The-Wrath-of-Angels-Charlie-Parker-11-by-John-Connolly.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a02a01a00a07a06/The-Burning-Soul-Charlie-Parker-10-by-John-Connolly.pdfIn PDF document text
    • http://muicuiu.dumb1.com/9a00a03a05a07a08/Deadly-Gamble-Charlie-Parker-1-by-Connie-Shelton.pdfIn PDF document text
    • http://muicuiu.dumb1.com/5a03a02a01a06/Dark-Hollow-Charlie-Parker-2-by-John-Connolly.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a03a04a09a01a01/Deadly-Gamble-Charlie-Parker-1-by-Connie-Shelton.pdfIn PDF document text
    • http://muicuiu.dumb1.com/9a07a02a04/A-Game-of-Ghosts-Charlie-Parker-15-by-John-Connolly.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a03a06a05a02a07/Dead-Famous-Kathleen-Mallory-7-by-Carol-O-39-Connell.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a01a03a00a05a06/The-Children-of-the-Red-King-Books-1-5-Midnight-for-Charlie-Bone-Charlie-Bone-and-the-Time-Twister-Charlie-Bone-and-the-Invisible-Boy-Charlie-Bone-and-the-Castle-of-Mirrors-and-Charlie-Bone-and-the-Hidden-King-by-Jenny-Nimmo.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a06a07a08a03a05/How-to-Become-a-Famous-Writer-Before-You-re-Dead-Your-Words-in-Print-and-Your-Name-in-Lights-by-Ariel-Gore.pdfIn PDF document text
    • http://muicuiu.dumb1.com/4a07a02a02a04a02/The-Book-of-the-Dead-Lives-of-the-Justly-Famous-and-the-Undeservedly-Obscure-by-John-Lloyd.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.