Malicious PDF — malware analysis report

Static analysis result for SHA-256 44792b719e105304…

MALICIOUS

PDF

26.8 KB Created: 2019-04-29 23:29:52 +01:00 Authoring application: mPDF 5.7
MD5: aeece16480a34db6154ada3b897547d6 SHA-1: 052104e7bcb3c70efbd140bda4b14c527a6515bb SHA-256: 44792b719e105304a1f4dba88f42c8ab2832ae526ee790334b52b9972a994359
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded links to external PDF documents hosted on the domain 'muicuiu.dumb1.com'. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier also flagged this PDF as malicious with a high probability. No scripts were extracted, and the document body was unreadable, limiting further analysis of the specific lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9695

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/6a01a06a00a02a05/Platero-and-I-Platero-y-yo-A-Dual-Language-Book-by-Juan-Ram-n-Jim-nez.pdf
    • http://muicuiu.dumb1.com/6a01a06a00a02a07/The-New-Life-La-Vita-Nuova-A-Dual-Language-Book-Dover-Dual-Language-Italian-by-Dante-Alighieri.pdf
    • http://muicuiu.dumb1.com/4a05a02a02a02a08/Flowers-of-Evil-and-Other-Works-Les-Fleurs-du-Mal-et-Oeuvres-Choisies-A-Dual-Language-Book-Dover-Foreign-Language-Study-Guides-by-Charles-Baudelaire.pdf
    • http://muicuiu.dumb1.com/6a01a06a00a01a01/First-Italian-Reader-A-Dual-Language-Book-by-Stanley-Appelbaum.pdf
    • http://muicuiu.dumb1.com/4a07a08a01a02a01/Bosley-Sees-the-World-A-Dual-Language-Book-in-Arabic-and-English-by-Tim-Johnson.pdf
    • http://muicuiu.dumb1.com/4a05a09a09a01a05/Introduction-to-German-Poetry-A-Dual-Language-Book-by-Gustave-Bording-Mathieu.pdf
    • http://muicuiu.dumb1.com/6a01a05a09a09a07/Mexican-Short-Stories-Cuentos-mexicanos-A-Dual-Language-Book-by-Stanley-Appelbaum.pdf
    • http://muicuiu.dumb1.com/6a01a05a09a09a08/Spanish-Stories-of-the-Romantic-Era-Cuentos-espa-oles-del-Romanticismo-A-Dual-Language-Book-by-Stanley-Appelbaum.pdf
    • http://muicuiu.dumb1.com/6a01a06a00a01a09/Rhymes-and-Legends-Selection-Rimas-y-Leyendas-selecci-n-A-Dual-Language-Book-by-Gustavo-Adolfo-B-cquer.pdf
    • http://muicuiu.dumb1.com/6a04a03a00a09a06/Short-Stories-by-the-Generation-of-1898-Cuentos-de-la-Generaci-n-de-1898-A-Dual-Language-Book-by-Miguel-de-Unamuno.pdf
    • http://muicuiu.dumb1.com/5a07a06a08a09a00/The-Little-Prince---Il-Piccolo-Principe-Bilingual-parallel-text---Bilingue-con-testo-a-fronte-English---Italian-Inglese---Italiano-Dual-Language-Easy-Reader-Book-33-by-Antoine-de-Saint-Exup-ry.pdf
    • http://muicuiu.dumb1.com/1a01a02a05a03a06a04/Der-gestiefelte-Kater-Kot-v-sapogah-Charles-Perrault-Zweisprachig-in-Deutsch-und-Russisch-Dual-Language-Illustrated-Children-s-Book-by-Charles-Perrault.pdf
    • http://muicuiu.dumb1.com/1a00a03a05a07a07a04/Der-Gestiefelte-Kater-Kot-V-Sapogah-Charles-Perrault-Zweisprachig-in-Deutsch-Und-Russisch-Dual-Language-Illustrated-Children-s-Book-by-Charles-Perrault.pdf
    • http://muicuiu.dumb1.com/1a01a01a07a04a08a06/Short-Stories-of-P-draic-Pearse-A-Dual-language-book-by-P-draic-Pearse.pdf
    • http://muicuiu.dumb1.com/9a04a03a04a00a03/Great-Stories-by-Kafka-and-Rilke-Meistererz-hlungen-von-Kafka-und-Rilke-A-Dual-Language-Book-by-Franz-Kafka.pdf
    • http://muicuiu.dumb1.com/1a00a07a08a06a08a07/9-Shorts-2011-dual-language-ebooks-by-Jutta-Mahlke.pdf
    • http://muicuiu.dumb1.com/1a00a07a08a06a00a05/Sparkling-Eyes-in-the-Stormy-Forest-dual-language-ebook-by-Jutta-Mahlke.pdf
    • http://muicuiu.dumb1.com/1a00a07a08a06a09a03/Euclid-s-Extension-to-the-Theorem-of-Pythagoras---dual-language-edition-by-Jutta-Mahlke.pdf
    • http://muicuiu.dumb1.com/9a02a09a05a01a00/Cinderella-Cendrillon-Presented-by-Frendees-Dual-Language-English-French-by-Layer.pdf
    • http://muicuiu.dumb1.com/9a02a09a04a03a07/Cinderella-Aschenputtel-Presented-by-Frendees-Dual-Language-English-German-by-Layer.pdf
    • http://muicuiu.dumb1.com/4a05a09a09a

Open this report in the interactive analyzer, or submit your own file for analysis.