Malicious PDF — malware analysis report

Static analysis result for SHA-256 45d4574348595ff1…

MALICIOUS

PDF

15.9 KB Created: 2019-05-03 08:35:41 +01:00 Authoring application: mPDF 5.7
MD5: 565aee2e14b08995d7495997d3e71c96 SHA-1: ceb088a3d6f6aa8d645e895ac6693b3f53602e94 SHA-256: 45d4574348595ff122f219eab76ecefeeb8cf26e80c0bc22f6ffadf795cc58a3
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links to external PDF documents, all hosted on the domain 'cefasfese.4pu.com'. This pattern is indicative of a link farm or a lure to a potentially malicious site. No scripts were extracted from this sample. The document body was heavily obfuscated and unreadable.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/9733737735734733/The-Dog-Department-James-Thurber-on-Hounds-Scotties-and-Talking-Poodles-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/9733737734734733/Secret-Lives-of-Walter-Mitty-and-of-James-Thurber-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/8736735737731/The-works-of-James-Thurber-Complete-and-unabridged-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/9733737734739731/Memorable-Quotations-from-James-Thurber-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/9733737733732735/A-Thurber-Carnival-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/9733737734734738/Cream-of-Thurber-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/9733737733733731/Thurber-and-Company-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/2739734735732737/Is-Sex-Necessary-or-Why-You-Feel-the-Way-You-Do-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/9733737734738732/The-Beast-in-Me-and-Other-Animals-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/3733733737737736/The-White-Deer-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/3731736731733730/Men-Women-and-Dogs-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/1736730738737/The-Years-with-Ross-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/1738737732730736/The-13-Clocks-and-The-Wonderful-O-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/9733737735733739/Credos-And-Curios-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/4731731739732/The-Secret-Life-of-Walter-Mitty-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/2737733734735731/The-Secret-Life-of-Walter-Mitty-by-James-Thurber.pdf
    • http://cefasfese.4pu.com/9733737734734732/James-Thurber-His-Life-and-Times-by-Harrison-Kinney.pdf
    • http://cefasfese.4pu.com/9733737735734731/Rivals-For-Power-Presidential-Congressional-Relations-by-James-A-Thurber.pdf
    • http://cefasfese.4pu.com/9733737735737733/Collecting-Himself-James-Thurber-on-Writing-and-Writers-Humor-and-Himself-by-Michael-J-Rosen.pdf
    • http://cefasfese.4pu.com/9733737735737735/The-Clocks-of-Columbus-The-Literary-Career-of-James-Thurber-by-Charles-S-Holmes.pdf
    • http://cefasfese.4pu.com/3731736731733730/Men-Women-and-Dogs-by-J

Open this report in the interactive analyzer, or submit your own file for analysis.