Malicious PDF — malware analysis report

Static analysis result for SHA-256 50db88b7b42dbb63…

MALICIOUS

PDF

18.8 KB Created: 2019-04-30 05:10:57 +01:00 Authoring application: mPDF 5.7
MD5: 122798c3a2a4a5cea3661e7f8836aed3 SHA-1: 1f80e1987ef9a17e8e058610c69cda65433db792 SHA-256: 50db88b7b42dbb6323250da130a673e64073bae93b6bb579f5be8381922c9ece
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO poisoning or to distribute malicious content. The ML classifier strongly indicated maliciousness. The embedded URLs, while appearing benign in isolation, are part of a link farm designed to direct users to potentially harmful content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/5a09a03a03a08a02/Sense-and-Sensibility-By-Jane-Austen-Illustrated-amp-Unabridged-Free-Bonus-Audiobook-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/5a09a03a04a08a02/Mansfield-Park-By-Jane-Austen---Illustrated-Comes-with-a-Free-Audiobook-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/1a01a07a07a01a00a03/Four-Major-Works-by-Jane-Austen-Northanger-Abbey-Lady-Susan-Sense-and-Sensibility-Pride-and-Prejudice-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/5a04a02a08a09a04/Sense-and-Sensibility-Audiobook-With-5-Great-Similar-Novels-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/5a06a01a07a00a03/Sense-and-Sensibility-Illustrated-and-Annotated-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/1a01a07a06a09a03a01/The-Complete-Works-of-Jane-Austen-In-One-Volume-Sense-and-Sensibility-Pride-and-Prejudice-Mansfield-Park-Emma-Northanger-Abbey-Persuasion-Lady-Sandition-and-the-Complete-Juvenilia-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/7a02a01a05a00a05/Mansfield-Park-Illustrated-Platinum-Edition-Free-Audiobook-Included-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/3a01a09a00a01a04/Sense-and-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/4a05a02a08a05a09/Sense-amp-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/1a08a04a00a00a04/Sense-and-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/7a06a07a02a06a04/Sense-and-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/9a01a06a02a06a02/Sense-and-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/5a03a01a09a06a00/Sense-and-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/7a00a05a01a05a07/Sense-and-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/9a01a09a05a02a00/Sense-and-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/3a07a07a07a02a06/Sense-and-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/7a00a09a00a09a08/Sense-and-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/9a01a02a08a06a06/Sense-and-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/1a01a01a05a09a05a08/Sense-and-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/7a02a01a04a03a07/Sense-and-Sensibility-by-Jane-Austen.pdf
    • http://muicuiu.dumb1.com/1a01a07a06a09a03a01/The-Complete-Works-of-Jane-Austen-In-One-Volume-Sense-and-Sensibility-Pride-and-Prejudice-Mansfield-Park-Emma-Northanger-Abbey-Persuasion-La

Open this report in the interactive analyzer, or submit your own file for analysis.