Malicious PDF — malware analysis report

Static analysis result for SHA-256 4b01e0da1d3ffa33…

MALICIOUS

PDF

30.1 KB Created: 2019-06-09 11:48:55 +01:00 Authoring application: mPDF 5.7
MD5: 0908fff195c1dfd869894c9fc480a707 SHA-1: 8cd8ec9265cfd4830fd99de1f08ded2c83950c95 SHA-256: 4b01e0da1d3ffa33dd0aaa3674b69f361272bb0f57c9b5cced75bf1b19904537
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded URLs, identified as a link farm. While many of these URLs were individually confirmed as benign, the sheer volume and the ML classifier's high confidence score suggest a malicious intent, likely for SEO manipulation or to distribute further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9684

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/1730734735733739734/Einleitung-in-Die-Mengenlehre-Eine-Gemeinverst-ndliche-Einf-hrung-in-Das-Reich-Der-Unendlichen-Gr-ssen-by-Abraham-Adolf-Fraenkel.pdf
    • http://cefasfese.4pu.com/1730734735734730734/Einleitung-in-Die-Mengenlehre-Eine-Gemeinverstandliche-Einfuhrung-in-Das-Reich-Der-Unendlichen-Grossen-by-Abraham-Adolf-Fraenkel.pdf
    • http://cefasfese.4pu.com/1731737737737735734/Geldtheorie-Und-Geldpolitik-in-Europa-Eine-Problemorientierte-Einf-Hrung-Mit-Einem-Kompendium-Monet-Rer-Fachbegriffe-by-Dieter-Duwendag.pdf
    • http://cefasfese.4pu.com/1731732731733731738/Von-Der-Verg-Ttlichung-Des-Menschen-ALS-Teilhabe-an-Der-Natur-Der-Gottheit-Eine-Einf-Hrung-in-Die-Christliche-Theosophie-II-by-J-rg-Weber.pdf
    • http://cefasfese.4pu.com/9735732732737731/Einf-hrung-in-Das-Schwedische-Rechtsleben-by-No-Contributor.pdf
    • http://cefasfese.4pu.com/9730737730738734/Einf-hrung-in-Die-Phonetik-by-Maria-Schubiger.pdf
    • http://cefasfese.4pu.com/1731733731732730731/Einf-hrung-in-Das-Siamesische-by-Walter-Trittel.pdf
    • http://cefasfese.4pu.com/1731736735736732739/Einf-hrung-in-Die-Reale-Und-Monet-re-Aussenwirtschaft-by-Udo-Broll.pdf
    • http://cefasfese.4pu.com/7735736738738732/Theosophie-Einf-hrung-in-bersinnliche-Welterkenntnis-Und-Menschenbestimmung-by-Rudolf-Steiner.pdf
    • http://cefasfese.4pu.com/9732730738733736/Einf-hrung-in-Das-Alte-Testament-Geschichte-Literatur-U-Religion-Israels-H-lfte-1-by-Johannes-Meinhold.pdf
    • http://cefasfese.4pu.com/9738735731737738/Weihnachten-in-Altdeutscher-Malerei-Sechzehn-Gem-lde-Des-15-Und-16-Jahrhunderts-in-Farbiger-Wiedergabe-Mit-Einer-Einf-hrung-by-Hans-Naumann.pdf
    • http://cefasfese.4pu.com/9738735731737739/Weihnachten-in-Altdeutscher-Malerei-Sechzehn-Gem-lde-Des-15-Und-16-Jahrhunderts-in-Farbiger-Wiedergabe-Mit-Einer-Einf-hrung-by-Hans-Naumann.pdf
    • http://cefasfese.4pu.com/1730733735733737737/Rameaus-Neffe-Studien-Und-Untersuchungen-Zur-Einf-hrung-in-Goethes-bersetzung-Des-Diderotschen-Dialogs-by-Rudolf-Schlosser.pdf
    • http://cefasfese.4pu.com/1731732732733732734/Religion-Kirche-Theologie-Einf-hrung-in-Die-Theologie-by-Hermann-Mulert.pdf
    • http://cefasfese.4pu.com/1730734735734730731/Leonhard-Eulers-Einleitung-in-Die-Analysis-Des-Unendlichen-Vol-3-by-Leonhard-Euler.pdf
    • http://cefasfese.4pu.com/8736739734739733/Demokratie-und-Erziehung-Eine-Einleitung-in-die-philosophische-P-dagogik-by-John-Dewey.pdf
    • http://cefasfese.4pu.com/1730734735732732733/Mythen-Und-Symbole-in-Der-quot-Unendlichen-Geschichte-quot---Eine-Filmanalyse-by-Patricia-Reisyan.pdf
    • http://cefasfese.4pu.com/1731735733737737736/Der-Saltzburgischen-Emigranten-Freuden-M-thige-Und-H-chst-Gesegnete-Wanderschafft-in-Die-K-niglich-Preussische-Lande-Oder-Ihre-Durch-Das-Reich-Bi-Dorthin-Genommene-March-Route-Nebst-Anf-hrung-Der-Grossen-Und-Vielen-Wohlthaten-Mit-Welchen-Ihnen-by-Johann-Heinrich-Baum.pdf
    • http://cefasfese.4pu.com/1731737731739731735/Wie-gr-nde-ich-eine-Religion-by-Adolf-Holl.pdf
    • http://cefasfese.4pu.com/1731733738737739735/Eine-Frage-Der-Rasse-Die-Evangelisch-Lutherische-Kirche-in-Bayern-Der-Arierparagraf-Und-Die-Bayerischen-Pfarrerfamilien-Mit-Judischen-Vorfahren-Im-Dritten-Reich-by-Axel-Tollner.pdf
    • http://cefasfese.4pu.com/1731732731733731738/Von-Der-Verg-Ttlich