Malicious PDF — malware analysis report

Static analysis result for SHA-256 49c1664501a108b9…

MALICIOUS

PDF

17.0 KB Created: 2019-04-30 04:17:42 +01:00 Authoring application: mPDF 5.7
MD5: 06a8f8c5d92fad85052d30e8e729c89e SHA-1: 95efbbf61af5265e8e96f58414d2fd8fccb13b26 SHA-256: 49c1664501a108b9ea34796421b751fe7d68469176b70089b2bdc884113e7a51
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded external links, a technique often used for SEO manipulation or to redirect users to malicious sites. The ML classifier strongly indicated maliciousness. While no scripts were extracted, the PDF structure itself suggests a malicious intent to distribute links, potentially leading to further compromise.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/2a00a04a08a08a03/The-Bravest-Princess-Wide-Awake-Princess-3-by-E-D-Baker.pdf
    • http://muicuiu.dumb1.com/7a01a05a05a08/The-Wide-Awake-Princess-by-E-D-Baker.pdf
    • http://muicuiu.dumb1.com/4a08a00a04a01a05/The-Wide-Awake-Princess-by-Katherine-Paterson.pdf
    • http://muicuiu.dumb1.com/5a05a02a00a08/The-Dragon-Princess-Tales-of-the-Frog-Princess-6-by-E-D-Baker.pdf
    • http://muicuiu.dumb1.com/4a00a03a09a09a05/Bravest-Princess-Ever-by-Rebecca-Lim.pdf
    • http://muicuiu.dumb1.com/3a02a01a07a08a06/Wide-Awake-Every-Day-Wide-Awake-1-by-Starla-J-King.pdf
    • http://muicuiu.dumb1.com/2a09a00a01a05a04/Wide-Awake-Wide-Awake-1-by-Kade-Boehme.pdf
    • http://muicuiu.dumb1.com/9a00a03a04a01/Wide-Spaces-Wide-Awake-1-5-by-Shelly-Crane.pdf
    • http://muicuiu.dumb1.com/1a03a02a07a01a02/Tales-of-the-Frog-Princess-by-E-D-Baker.pdf
    • http://muicuiu.dumb1.com/4a06a04a06a09a01/Once-Upon-a-Curse-Tales-of-the-Frog-Princess-3-by-E-D-Baker.pdf
    • http://muicuiu.dumb1.com/1a03a05a03a03a08/No-Place-for-Magic-The-Tales-of-the-Frog-Princess-4-by-E-D-Baker.pdf
    • http://muicuiu.dumb1.com/5a07a06a08a01/Dragon-s-Breath-Tales-of-the-Frog-Princess-2-by-E-D-Baker.pdf
    • http://muicuiu.dumb1.com/9a00a01a02a06/The-Princess-Test-The-Princess-Tales-2-by-Gail-Carson-Levine.pdf
    • http://muicuiu.dumb1.com/2a00a04a09a01a02/Believe-Me-I-Never-Felt-a-Pea-The-Story-of-the-Princess-and-the-Pea-as-Told-by-the-Princess-by-Nancy-Loewen.pdf
    • http://muicuiu.dumb1.com/2a09a01a03a08a08/The-Princess-and-the-Peer-The-Princess-Brides-1-by-Tracy-Anne-Warren.pdf
    • http://muicuiu.dumb1.com/3a09a07a06a01a01/The-Princess-Companion-A-Retelling-of-The-Princess-and-the-Pea-The-Four-Kingdoms-1-by-Melanie-Cellier.pdf
    • http://muicuiu.dumb1.com/3a06a06a02a01/The-Princess-and-the-Goblin-Princess-Irene-and-Curdie-1-by-George-MacDonald.pdf
    • http://muicuiu.dumb1.com/3a08a09a09a00a04/The-Princess-Diaries-Guide-to-Life-Discover-Your-Inner-Princess-by-Meg-Cabot.pdf
    • http://muicuiu.dumb1.com/2a01a02a04a08a01/The-Measure-of-a-Princess-Gun-Princess-Royale-2-by-Albert-Ruckholdt.pdf
    • http://muicuiu.dumb1.com/5a01a00a02/Stolen-Princess-Princess-Series-2-by-Alexa-Riley.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.