Malicious PDF — malware analysis report

Static analysis result for SHA-256 4913c19c6497486c…

MALICIOUS

PDF

22.7 KB Created: 2020-02-05 10:24:28 +00:00 Authoring application: mPDF 5.7
MD5: 79bcac2e6d2071f25cac2e6e15a94057 SHA-1: 49cb626e1d3c9c1a6b1b90f00ca3bb8460b4788d SHA-256: 4913c19c6497486c7e0d564038e14ad5f09bf3d0fba3ef12cad31adfe521ce09
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded links to external PDFs hosted on a domain with a suspicious structure. The ML classifier also flagged this PDF as malicious. The primary attack pattern appears to be a link farm designed to redirect users to potentially malicious content, rather than delivering a direct payload within the PDF itself. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9900

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://eascasas.myhome.cx/1aa1aa1aa2aa7aa5aa7/Herrschaft-Und-Unterwerfung-Christi-1-Kor-15-24-28-in-Exegese-Und-Theologie-Der-Vater-Bis-Zum-Ausgang-Des-4-Jahrhunderts-by-Eckhard-Schendel.pdf
    • http://eascasas.myhome.cx/9aa3aa2aa9aa0aa5/Die-Landesf-rstliche-Verwaltungsrechtspflege-in-sterreich-Vom-Ausgang-Des-15-Bis-Zum-Ausgang-Des-18-Jahrhunderts-Vol-2-by-Friedrich-Tezner.pdf
    • http://eascasas.myhome.cx/1aa1aa3aa8aa8aa6aa8/Herrschaft-und-Heil-Politische-Theologie-in-Alt-gypten-Israel-und-Europa-by-Jan-Assmann.pdf
    • http://eascasas.myhome.cx/1aa1aa2aa2aa3aa2aa4/Religion-Kirche-Theologie-Einf-hrung-in-Die-Theologie-by-Hermann-Mulert.pdf
    • http://eascasas.myhome.cx/9aa3aa2aa8aa1aa7/Vacation-from-Reality-The-Art-of-Anthony-Ausgang-by-Anthony-Ausgang.pdf
    • http://eascasas.myhome.cx/1aa1aa1aa0aa2aa1aa8/Wege-Der-Herausbildung-Der-Wortbildungsnorm-Im-Ostslawischen-Des-11--17-Jahrhunderts-Eine-Vergleichsstudie-Der-Schriftsprache-Der-Kiever-Rus-Zu-Der-Moskauer-Rus-Dem-Altukrainischen-Und-Dem-Altweissrussischen-Des-15--17-Jahrhunderts-Unter-Berucksi-by-Swetlana-Mengel.pdf
    • http://eascasas.myhome.cx/1aa1aa5aa3aa6aa0aa3/Die-Pergamenische-Sigillata-Aus-Der-Stadtgrabung-Von-Pergamon-Mitte-2-Jahrhunderts-V-Chr---Mitte-2-Jahrhunderts-N-Chr-by-Carsten-Meyer-Schlichtmann.pdf
    • http://eascasas.myhome.cx/8aa8aa3aa7aa7aa0/Exegese-Zu--Das-Scherflein-Der-Witwe-in-Lukas-21-1--4-by-Carolin-Eyert.pdf
    • http://eascasas.myhome.cx/9aa6aa3aa0aa5aa4/Die-Spur-der-wei-en-Kreise-by-Eckhard-Bausch.pdf
    • http://eascasas.myhome.cx/1aa1aa9aa6aa4aa5aa3/Spirituelle-Erfahrung-in-Philosophischer-Perspektive-by-Eckhard-Frick.pdf
    • http://eascasas.myhome.cx/1aa0aa3aa2aa5aa7aa9/Kulturgeschichte-Der-Missverstandnisse-Studien-Zum-Geistesleben-by-Eckhard-Henscheid.pdf
    • http://eascasas.myhome.cx/1aa1aa2aa2aa0aa7aa8/America-In-Close-Up-Background-Books-by-Eckhard-Fiedler.pdf
    • http://eascasas.myhome.cx/1aa0aa9aa5aa7aa3aa8/Napoleons-Anteil-Am-Code-Civil-by-Eckhard-Maria-Theewen.pdf
    • http://eascasas.myhome.cx/8aa6aa9aa8aa4aa4/Wo-Jahrhunderte-sich-treffen-Tage-in-Marrakesch-by-Eckhard-W-Scholz.pdf
    • http://eascasas.myhome.cx/9aa3aa2aa8aa9aa9/Osterreich-Bis-Zum-Ausgang-Der-Babenbergerzeit-by-Erna-Patzelt.pdf
    • http://eascasas.myhome.cx/9aa3aa2aa8aa2aa6/Fremdgehen-mit-unerwartetem-Ausgang-Dreier-by-Mandy-Hammer.pdf
    • http://eascasas.myhome.cx/9aa3aa2aa9aa0aa1/Gayles-St-Georg-Ausgang-und-Hingabe-by-Sissi-Kaipurgay.pdf
    • http://eascasas.myhome.cx/1aa0aa4aa7aa6aa2aa7/Manuelas-Unterwerfung-by-F-J-Krohlow.pdf
    • http://eascasas.myhome.cx/9aa3aa2aa9aa7aa8/Der-Ausgang-Der-Moderne-Ein-Buch-Der-Opposition-1909-by-Samuel-Lublinski.pdf
    • http://eascasas.myhome.cx/9aa0aa7aa0aa1aa6/Kontrollieren-Symphonie-der-Unterwerfung-4-by-C-D-Reiss.pdf
    • http://eascasas.myhome.cx/1aa1aa3aa8aa8aa6aa8/Herrschaft-und-Heil-Politische-Theologie