Malicious PDF — malware analysis report

Static analysis result for SHA-256 511e12e2690f24be…

MALICIOUS

PDF

22.0 KB Created: 2019-05-02 18:32:30 +01:00 Authoring application: mPDF 5.7
MD5: 75b27a62a057445edcd2f3c75116cd7d SHA-1: 048baf2f924046d337eeb737a686d87f26c4c745 SHA-256: 511e12e2690f24beff2051f12a4f5a3a79e5a69b2c0ed761afdf21a964ffafef
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF document contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While many of these links point to what appear to be benign book PDFs, the sheer volume and the nature of the heuristic suggest a potential attempt to manipulate search engine results or to distribute malicious content disguised as legitimate documents. The ML_NYX_PDF_MALICIOUS classifier also strongly indicated maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9903

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://unieoooq.linkpc.net/14e14e34e84e74e74e9/Leben-lernen-Die-Weisheit-der-Mythen-by-Luc-Ferry.pdf
    • http://unieoooq.linkpc.net/84e94e14e64e24e0/ENGLISCH-LERNEN---I-SPEAK-ENGLISCH-Englisch-lernen-Power-Wortschatz---ber-1000-kraftvolle-W-rter-f-r-ein-starkes-Leben-by-ENGLISCH-LERNEN.pdf
    • http://unieoooq.linkpc.net/14e14e34e04e64e14e8/Gelassenheit-lernen-Wie-Sie-mit-mehr-Gelassenheit-ein-entspanntes-ruhiges-und-gl-ckliches-Leben-f-hren-by-Tim-Winter.pdf
    • http://unieoooq.linkpc.net/54e54e94e14e54e8/Fergus-the-Ferry-Fergus-the-Ferry-1-by-J-W-Noble.pdf
    • http://unieoooq.linkpc.net/14e04e74e14e44e54e0/Der-Pilot-Die-Weisheit-wartet-ber-den-Wolken-by-Richard-Bach.pdf
    • http://unieoooq.linkpc.net/14e14e64e64e54e54e6/Das-Corpus-Hermeticum-Weisheit-die-aus-dem-Ewigen-flie-t-by-Manfred-Ehmer.pdf
    • http://unieoooq.linkpc.net/14e14e64e64e54e64e3/Weisheit-die-aus-dem-Ewigen-flie-t-Das-Corpus-Hermeticum-by-Manfred-Ehmer.pdf
    • http://unieoooq.linkpc.net/94e34e44e14e84e4/Das-tibetische-Buch-vom-Leben-und-vom-Sterben-Ein-Schl-ssel-zum-tieferen-Verst-ndnis-von-Leben-und-Tod-by-Sogyal-Rinpoche.pdf
    • http://unieoooq.linkpc.net/14e04e04e34e44e64e7/Wie-soll-ich-leben-oder-Das-Leben-Montaignes-in-einer-Frage-und-zwanzig-Antworten-by-Sarah-Bakewell.pdf
    • http://unieoooq.linkpc.net/14e14e34e84e84e24e5/Mythen-amp-Legenden-van-Japan-by-F-Hadland-Davis.pdf
    • http://unieoooq.linkpc.net/14e14e04e74e94e34e1/Die-Geburt-des-Abendlandes---Band-2-Das-Buch-der-Weisheit-und-die-Spuren-des-Lichts-by-Harald-Specht.pdf
    • http://unieoooq.linkpc.net/14e04e94e44e64e74e4/Weisheit-der-Wechseljahre-Selbstheilung-Ver-nderung-und-Neuanfang-in-der-zweiten-Lebensh-lfte-by-Christiane-Northrup.pdf
    • http://unieoooq.linkpc.net/94e54e54e64e14e8/Land-der-Mythen-4-Das-vierte-Buch-by-Michael-Peinkofer.pdf
    • http://unieoooq.linkpc.net/94e54e54e64e14e1/Land-der-Mythen-6-Das-sechste-Buch-by-Michael-Peinkofer.pdf
    • http://unieoooq.linkpc.net/94e04e54e54e64e8/Die-Neuerfindung-des-Erfolgs-Weisheit-Staunen-Gro-z-gigkeit---Was-uns-wirklich-weiter-bringt-by-Arianna-Huffington.pdf
    • http://unieoooq.linkpc.net/14e14e34e84e74e24e0/Claude-M-Sing-Around-Fighting-Against-Multiple-Sclerosis-by-John-Mythen.pdf
    • http://unieoooq.linkpc.net/14e04e04e64e74e64e5/Irische-Legende-Mysterien-Mythen-Metamorphosen-by-Franz-J-Liessem.pdf
    • http://unieoooq.linkpc.net/14e04e34e04e14e74e2/Wien-Heldenplatz-Mythen-Und-Massen-1848-1998-by-Herbert-Haupt.pdf
    • http://unieoooq.linkpc.net/14e04e94e24e04e34e8/Dornr-schens-Zweites-Erwachen-Die-Wirklichkeit-In-Mythen-Und-M-rchen-by-Tamas-Kurthy.pdf
    • http://unieoooq.linkpc.net/94e94e54e74e54e1/Bungalows-by-Kathryn-Ferry.pdf
    • http://unieoooq.linkpc.net/14e14e64e64e54e54e6/Das-C