Malicious PDF — malware analysis report

Static analysis result for SHA-256 52efecc081b2c24c…

MALICIOUS

PDF

16.9 KB Created: 2019-04-30 04:43:33 +01:00 Authoring application: mPDF 5.7
MD5: 3da19becd9699d9c4beec7edf75f7a19 SHA-1: 3f516abe3ded02eb68e8e9975b3e6be2bb0c74e2 SHA-256: 52efecc081b2c24cf03a60674e4fbbfb4be3c54f9a4725b84ba6ef1a2ccbe5b4
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links pointing to external PDF files, a technique often used for SEO poisoning or to distribute malicious content. The ML classifier strongly indicated maliciousness. The primary attack pattern involves directing users to a domain hosting numerous book-themed PDFs, likely as a lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9787

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/2a01a04a04a04a07/The-Space-Left-Behind-The-Space-in-Between-2-by-Brittainy-C-Cherry.pdf
    • http://muicuiu.dumb1.com/6a07a07a00a03a04/Master-Bound-To-the-Space-Warrior-Alien-Space-Monsters-4-by-Risa-Rills.pdf
    • http://muicuiu.dumb1.com/3a04a04a00a03a01/The-High-Frontier-Human-Colonies-in-Space-Apogee-Books-Space-by-Gerard-K-O-39-Neill.pdf
    • http://muicuiu.dumb1.com/4a08a03a09a01a07/Kilt-in-Space-Space-Grit-Book-2-by-Ella-Drake.pdf
    • http://muicuiu.dumb1.com/3a01a06a05a05a07/Pets-in-Space-Cats-Dogs-and-Other-Worldly-Creatures-Pets-in-Space-Anthologies-1-by-S-E-Smith.pdf
    • http://muicuiu.dumb1.com/3a06a08a04a07/The-Gravity-of-Us-by-Brittainy-C-Cherry.pdf
    • http://muicuiu.dumb1.com/8a02a04a07/Disgrace-by-Brittainy-C-Cherry.pdf
    • http://muicuiu.dumb1.com/7a00a09/Art-amp-Soul-by-Brittainy-C-Cherry.pdf
    • http://muicuiu.dumb1.com/7a07a05a06a07/Art-amp-Soul-by-Brittainy-C-Cherry.pdf
    • http://muicuiu.dumb1.com/1a04a05a02a00a01/Loving-Mr-Daniels-by-Brittainy-C-Cherry.pdf
    • http://muicuiu.dumb1.com/5a04a02a06/The-Gravity-of-Us-Elements-4-by-Brittainy-C-Cherry.pdf
    • http://muicuiu.dumb1.com/2a01a04a04a00a06/Please-Call-Me-Tony-by-Brittainy-C-Cherry.pdf
    • http://muicuiu.dumb1.com/4a01a08a01a02a09/A-Love-Letter-from-the-Girls-Who-Feel-Everything-by-Brittainy-C-Cherry.pdf
    • http://muicuiu.dumb1.com/1a00a03a08a09a04/Empty-Space-Empty-Space-Trilogy-3-by-M-John-Harrison.pdf
    • http://muicuiu.dumb1.com/3a02a05a04a04/2001-A-Space-Odyssey-Space-Odyssey-1-by-Arthur-C-Clarke.pdf
    • http://muicuiu.dumb1.com/5a03a00a03a09/2001-A-Space-Odyssey-Space-Odyssey-1-by-Arthur-C-Clarke.pdf
    • http://muicuiu.dumb1.com/3a03a08a05a00a08/2001-A-Space-Odyssey-Space-Odyssey-1-by-Arthur-C-Clarke.pdf
    • http://muicuiu.dumb1.com/1a05a04a01a09a06/2001-A-Space-Odyssey-Space-Odyssey-1-by-Arthur-C-Clarke.pdf
    • http://muicuiu.dumb1.com/7a04a03a08a04/Space-Demons-Space-Demons-Trilogy-1-by-Gillian-Rubinstein.pdf
    • http://muicuiu.dumb1.com/5a07a08a00a04/2001-A-SPACE-ODYSSEY-2010-ODYSSEY-TWO-2061-ODYSSEY-THREE-3001-THE-FINAL-ODYSSEY-SPACE-ODYSSEY-BOOK-SERIES-1-2-3-4--by-Arthur-C-Clarke.pdf
    • http://muicuiu.dumb1.com/1a04a05a02a00a

Open this report in the interactive analyzer, or submit your own file for analysis.