Malicious PDF — malware analysis report

Static analysis result for SHA-256 4bd08295e685bf0b…

MALICIOUS

PDF

18.4 KB Created: 2019-04-30 01:32:11 +01:00 Authoring application: mPDF 5.7
MD5: 8733feb41848560a32c88864a7c9fbf9 SHA-1: 00cab8741e0ec86505b0a6013085c3fd45a86441 SHA-256: 4bd08295e685bf0bcfab3a46f0b1fcefb488ab32eb6f88597db1093157012ebf
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDF documents, characteristic of a link farm. This technique is often used to distribute malicious content or to manipulate search engine rankings. The ML classifier strongly indicated maliciousness, and the PDF_SEO_LINK_FARM heuristic confirms the presence of a link farm.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/4a03a04a09a09a00/Deadly-Gamble-Charlie-Parker-1-by-Connie-Shelton.pdf
    • http://muicuiu.dumb1.com/9a00a03a05a07a08/Deadly-Gamble-Charlie-Parker-1-by-Connie-Shelton.pdf
    • http://muicuiu.dumb1.com/1a03a04a09a01a01/Deadly-Gamble-Charlie-Parker-1-by-Connie-Shelton.pdf
    • http://muicuiu.dumb1.com/7a01a08a09a06a07/Charlie-Parker---Omnibook-For-Bass-Clef-Instruments-by-Charlie-Parker.pdf
    • http://muicuiu.dumb1.com/7a01a08a09a05a01/Charlie-Parker-Omnibook-For-C-Instruments-by-Charlie-Parker.pdf
    • http://muicuiu.dumb1.com/9a03a05a07a07a06/The-Wife-Gamble-Salinger-Six-Men-of-Alaska-3-by-Charlie-Hart.pdf
    • http://muicuiu.dumb1.com/1a02a00a04a01/Deadly-Gamble-Mojo-1-by-Linda-Lael-Miller.pdf
    • http://muicuiu.dumb1.com/1a00a01a02a00a03a00/Sweet-Payback-Samantha-Sweet-8-by-Connie-Shelton.pdf
    • http://muicuiu.dumb1.com/1a00a04a09a02a03/The-Renegades-Charlie-Hood-2-by-T-Jefferson-Parker.pdf
    • http://muicuiu.dumb1.com/2a08a06a09a00a03/Shelton-in-Love-Shelton-1-by-Dianne-Hartsock.pdf
    • http://muicuiu.dumb1.com/1a07a06a05a04a08/The-Wrath-of-Angels-Charlie-Parker-11-by-John-Connolly.pdf
    • http://muicuiu.dumb1.com/1a03a02a06a06a03/The-Famous-and-the-Dead-Charlie-Hood-6-by-T-Jefferson-Parker.pdf
    • http://muicuiu.dumb1.com/5a03a02a01a06/Dark-Hollow-Charlie-Parker-2-by-John-Connolly.pdf
    • http://muicuiu.dumb1.com/9a07a02a04/A-Game-of-Ghosts-Charlie-Parker-15-by-John-Connolly.pdf
    • http://muicuiu.dumb1.com/2a02a01a00a07a06/The-Burning-Soul-Charlie-Parker-10-by-John-Connolly.pdf
    • http://muicuiu.dumb1.com/3a00a05a01a01a09/Every-Dead-Thing-Charlie-Parker-1-by-John-Connolly.pdf
    • http://muicuiu.dumb1.com/2a01a03a00a05a06/The-Children-of-the-Red-King-Books-1-5-Midnight-for-Charlie-Bone-Charlie-Bone-and-the-Time-Twister-Charlie-Bone-and-the-Invisible-Boy-Charlie-Bone-and-the-Castle-of-Mirrors-and-Charlie-Bone-and-the-Hidden-King-by-Jenny-Nimmo.pdf
    • http://muicuiu.dumb1.com/7a09a09a05a07a01/Wayne-Shelton---Volume-5---The-Vengeance-Wayne-Shelton-by-Cailleteau.pdf
    • http://muicuiu.dumb1.com/3a05a02a04a06a08/Finding-Angela-Shelton-by-Angela-Shelton.pdf
    • http://muicuiu.dumb1.com/6a05a06a04a09/Charlie-and-the-Chocolate-Factory-and-Charlie-and-the-Great-Glass-Elevator-by-Roald-Dahl.pdf
    • http://muicuiu.dumb1.com/1a03a02a06a06a03/The-

Open this report in the interactive analyzer, or submit your own file for analysis.