Malicious PDF — malware analysis report

Static analysis result for SHA-256 50d2a521ec3ae8fb…

MALICIOUS

PDF

18.2 KB Created: 2019-04-30 05:15:19 +01:00 Authoring application: mPDF 5.7
MD5: facfccba822c9c1efc36edd473b99c11 SHA-1: 6a91eb3dc69aff1d35c720563217e2f00f9f0782 SHA-256: 50d2a521ec3ae8fb182add780858e652e52ec1b1369c826d3bb1dd0ed93e0cf5
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs pointing to external PDF files, a technique often used for SEO spam or to distribute further malicious content. The ML classifier strongly indicated maliciousness, and the PDF structure suggests a link farm. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9931

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/3a04a08a09a07a05/The-Billion-Dollar-Spy-A-True-Story-of-Cold-War-Espionage-and-Betrayal-by-David-E-Hoffman.pdf
    • http://muicuiu.dumb1.com/1a02a03a06/The-Billion-Dollar-Spy-A-True-Story-of-Cold-War-Espionage-and-Betrayal-by-David-E-Hoffman.pdf
    • http://muicuiu.dumb1.com/1a00a03a00a05a02/Cold-Steel-Lakshmi-Mittal-And-The-Multi-Billion-Dollar-Battle-For-A-Global-Empire-by-Tim-Bouquet.pdf
    • http://muicuiu.dumb1.com/1a07a04a05a06a00/His-Billion-Dollar-Baby-by-Lea-Nolan.pdf
    • http://muicuiu.dumb1.com/4a09a08a09a05a05/Billion-Dollar-Baby-1-by-Simone-Holloway.pdf
    • http://muicuiu.dumb1.com/7a04a00a00a02a04/The-Billion-Dollar-Book-by-Yogesh-Cholera.pdf
    • http://muicuiu.dumb1.com/1a00a07a08a00a09a02/Billion-Dollar-Love-by-Aisha-Brooks.pdf
    • http://muicuiu.dumb1.com/4a02a08a00a02a03/The-Billion-Dollar-Boy-Jupiter-2-by-Charles-Sheffield.pdf
    • http://muicuiu.dumb1.com/4a07a06a09a05a05/The-Billion-Dollar-Bad-Boy-The-Billionaire-s-Club-2-by-Jackie-Ashenden.pdf
    • http://muicuiu.dumb1.com/1a06a06a00a02/The-Billion-Dollar-Sure-Thing-by-Paul-Emil-Erdman.pdf
    • http://muicuiu.dumb1.com/5a06a00a01a01a02/Billion-Dollar-Baby-Bargain-by-Tessa-Radley.pdf
    • http://muicuiu.dumb1.com/3a02a09a03a09a03/The-Billion-Dollar-Marriage-Contract-by-Alyssa-Urbano.pdf
    • http://muicuiu.dumb1.com/2a02a03a06a08a07/Don-t-Tell-Mummy-A-True-Story-of-the-Ultimate-Betrayal-by-Toni-Maguire.pdf
    • http://muicuiu.dumb1.com/6a08a09a09a02/Don-t-Tell-Mummy-A-True-Story-of-the-Ultimate-Betrayal-by-Toni-Maguire.pdf
    • http://muicuiu.dumb1.com/1a01a05a04a02a06a00/Billion-Dollar-Turnaround-The-3m-Spinoff-That-Became-Imation-by-William-T-Monahan.pdf
    • http://muicuiu.dumb1.com/3a05a07a04a03a02/The-Billion-Dollar-Threat-Llewellyn-the-Ghost-1-by-Peter-Worthington.pdf
    • http://muicuiu.dumb1.com/5a03a08a05a01a04/Billion-Dollar-Cowboy-Cowboys-amp-Brides-1-by-Carolyn-Brown.pdf
    • http://muicuiu.dumb1.com/7a02a03a03a00a04/The-Bigamist-the-true-story-of-a-husband-s-ultimate-betrayal-by-Mary-Turner-Thomson.pdf
    • http://muicuiu.dumb1.com/3a02a09a05a09a08/Junkyard-Planet-Travels-in-the-Billion-Dollar-Trash-Trade-by-Adam-Minter.pdf
    • http://muicuiu.dumb1.com/4a03a06a06a01a01/Wounds-of-the-Father-A-True-Story-of-Child-Abuse-Betrayal-and-Redemption-by-Elizabeth-Garrison.pdf
    • http://muicuiu.dumb1.com/4a02a08a00a02a03/The-Billio

Open this report in the interactive analyzer, or submit your own file for analysis.