Malicious PDF — malware analysis report

Static analysis result for SHA-256 4c7cde8ceaafcf5f…

MALICIOUS

PDF

18.2 KB Created: 2019-04-30 02:07:29 +01:00 Authoring application: mPDF 5.7
MD5: 976fd306f2fb85ba7dcef4224e2a6147 SHA-1: 829263ebc061d7f8c419e9cdd0d95246742d7270 SHA-256: 4c7cde8ceaafcf5f9b653cb96362352c24fcf655f8101eba79e6dc649a7226d6
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, suggesting a link farm or redirection to malicious content. The ML classifier also strongly indicated maliciousness. While no scripts were extracted, the sheer volume of links points to a deceptive or manipulative purpose.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9931

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/8a05a06a05a03/The-Purple-Emperor-The-Faerie-Wars-Chronicles-2-by-Herbie-Brennan.pdf
    • http://muicuiu.dumb1.com/8a08a03a02a00a07/Through-the-Wardrobe-Your-Favorite-Authors-on-C-S-Lewis-s-Chronicles-of-Narnia-by-Herbie-Brennan.pdf
    • http://muicuiu.dumb1.com/1a01a07a07a02a02a06/The-Atlantis-Enigma-by-Herbie-Brennan.pdf
    • http://muicuiu.dumb1.com/6a02a08a05a05a04/Madame-de-Gaulle-s-Penis-by-Herbie-Brennan.pdf
    • http://muicuiu.dumb1.com/3a07a09a06a00a03/The-Doomsday-Box-Shadow-Project-2-by-Herbie-Brennan.pdf
    • http://muicuiu.dumb1.com/1a01a07a07a02a02a03/The-Secret-History-of-Ancient-Egypt-by-Herbie-Brennan.pdf
    • http://muicuiu.dumb1.com/1a01a07a07a03a01a02/Frankenstella-And-The-Video-Shop-Monster-by-Herbie-Brennan.pdf
    • http://muicuiu.dumb1.com/1a01a07a07a02a07a07/Strange-Powers-Of-The-Human-Mind-by-Herbie-Brennan.pdf
    • http://muicuiu.dumb1.com/5a03a00a07a03a00/La-guerre-des-Fees-tome-3---Le-seigneur-du-royaume-by-Herbie-Brennan.pdf
    • http://muicuiu.dumb1.com/4a01a06a04a01a03/The-Golden-Book-of-Faerie-The-Chronicles-of-Faerie-1-4-by-O-R-Melling.pdf
    • http://muicuiu.dumb1.com/3a09a02a03a03a05/Rogue-Emperor-A-Novel-of-the-Chronoplane-Wars-by-Crawford-Kilian.pdf
    • http://muicuiu.dumb1.com/1a02a00a01a09a02/The-Summer-King-The-Chronicles-of-Faerie-2-by-O-R-Melling.pdf
    • http://muicuiu.dumb1.com/4a00a01a02a03a02/Faerie-Hunt-The-Changeling-Chronicles-6-by-Emma-L-Adams.pdf
    • http://muicuiu.dumb1.com/1a01a07a07a01a08a07/Herbie-Jones-and-the-Dark-Attic-Herbie-Jones-6-by-Suzy-Kline.pdf
    • http://muicuiu.dumb1.com/6a09a01a04a08a02/The-Chronicles-of-Lucius-Leffing-by-Joseph-Payne-Brennan.pdf
    • http://muicuiu.dumb1.com/2a09a09a05a07a01/Emperor-s-Consort-Chronicles-of-the-Shifter-Directive-5-by-Scarlet-Hyacinth.pdf
    • http://muicuiu.dumb1.com/2a03a09a04a00a07/Lament-The-Faerie-Queen-s-Deception-Books-of-Faerie-1-by-Maggie-Stiefvater.pdf
    • http://muicuiu.dumb1.com/7a08a01a03a05a06/Muslihat-Ratu-Peri---Lament-The-Faerie-Queen-s-Deception-Books-of-Faerie-1-by-Maggie-Stiefvater.pdf
    • http://muicuiu.dumb1.com/2a05a08a07a07a05/Ballad-A-Gathering-of-Faerie-Books-of-Faerie-2-by-Maggie-Stiefvater.pdf
    • http://muicuiu.dumb1.com/2a09a04a00a04a02/Elric-The-Sleeping-Sorceress-Chronicles-of-the-Last-Emperor-of-Melnibon-3-by-Michael-Moorcock.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.