Malicious PDF — malware analysis report

Static analysis result for SHA-256 512cedbfd4d97c6d…

MALICIOUS

PDF

17.2 KB Created: 2019-08-02 07:36:10 +01:00 Authoring application: mPDF 5.7 First seen: 2021-10-23
MD5: c4ecd01177d761c4fe28e394c1194cdb SHA-1: 83fab2f93f57725f6d89b32010ebc73fbde74325 SHA-256: 512cedbfd4d97c6d563047f7c06497b277b301ba029a435b86b09458290daffc
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. These URLs point to various book titles, suggesting a potential SEO spam or content aggregation scheme. While the URLs themselves are currently marked as benign, the sheer volume and the nature of the heuristic indicate a malicious intent to drive traffic or potentially host further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9787

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/1738738731732737/When-the-Dead-Speak-by-S-D-Tooley.pdf In PDF document text
    • http://cefasfese.4pu.com/2735732732732733/When-the-Dead-Speak-Sam-Casey-Mystery-1-by-S-D-Tooley.pdfIn PDF document text
    • http://cefasfese.4pu.com/4733735733735/Speak-for-the-Dead-Bragg-5-by-Jack-Lynch.pdfIn PDF document text
    • http://cefasfese.4pu.com/3736738735737730/To-Speak-for-the-Dead-Jake-Lassiter-1-by-Paul-Levine.pdfIn PDF document text
    • http://cefasfese.4pu.com/6732738735731738/Speak-Ill-of-the-Dead-A-Camilla-MacPhee-Mystery-1-by-Mary-Jane-Maffini.pdfIn PDF document text
    • http://cefasfese.4pu.com/8731730731733730/Speak-Truthfully-Speak-Your-Way-to-an-Authentic-Life-with-Awareness-Courage-and-Confidence-by-Robert-Rabbin.pdfIn PDF document text
    • http://cefasfese.4pu.com/4733738732732739/Speak-English-Like-an-American-You-Already-Speak-English---Now-Speak-It-Even-Better-by-Amy-Gillett.pdfIn PDF document text
    • http://cefasfese.4pu.com/3738735739731736/What-Lies-Within-Sam-Casey-Mystery-5-by-S-D-Tooley.pdfIn PDF document text
    • http://cefasfese.4pu.com/6734738733737737/Anima-and-the-Goat-by-Hunt-Tooley.pdfIn PDF document text
    • http://cefasfese.4pu.com/1737730731737738/Voices-of-the-Voiceless-Women-Justice-and-Human-Rights-in-Guatemala-by-Michelle-Tooley.pdfIn PDF document text
    • http://cefasfese.4pu.com/1734734738730732/Speak-Easy-Speak-Easy-1-by-Melanie-Harlow.pdfIn PDF document text
    • http://cefasfese.4pu.com/5739733739733/Dead-Girls-Dead-Boys-Dead-Things-by-Richard-Calder.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730736739733732734/Conversations-With-The-Dead-The-Grateful-Dead-Interview-Book-by-David-Gans.pdfIn PDF document text
    • http://cefasfese.4pu.com/3735739733733739/United-States-of-the-Dead-White-Flag-of-the-Dead-4-by-Joseph-Talluto.pdfIn PDF document text
    • http://cefasfese.4pu.com/3735739733732733/Last-Stand-of-the-Dead-White-Flag-of-the-Dead-6-by-Joseph-Talluto.pdfIn PDF document text
    • http://cefasfese.4pu.com/2734735738736731/Child-of-a-Dead-God-Noble-Dead-Series-1-6-by-Barb-Hendee.pdfIn PDF document text
    • http://cefasfese.4pu.com/4733732735736739/Dead-Certain-Dead-2-John-Mancini-4-by-Mariah-Stewart.pdfIn PDF document text
    • http://cefasfese.4pu.com/2738730730731733/Dead-Of-Winter-The-Beautiful-Dead-2-by-Daryl-Banner.pdfIn PDF document text
    • http://cefasfese.4pu.com/6734735734738/Dead-Is-a-Killer-Tune-Dead-Is-7-by-Marlene-Perez.pdfIn PDF document text
    • http://cefasfese.4pu.com/3735739732730730/Remains-of-the-Dead-Domain-of-the-Dead-2-by-Iain-McKinnon.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.