Malicious PDF — malware analysis report

Static analysis result for SHA-256 53359f864a2b8c8f…

MALICIOUS

PDF

17.7 KB Created: 2019-11-07 21:57:12 +00:00 Authoring application: mPDF 5.7
MD5: b92e0664622ac080d0eba4e063e543a9 SHA-1: 11048c65c65e34e43d682dd33a199949475b2e0e SHA-256: 53359f864a2b8c8fd2fb4474f4edf302e971a3841666ffec31ec64bf0172dbcf
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of embedded external links, identified as a link farm. While the extracted URLs themselves are currently classified as benign, the sheer volume and the heuristic firing indicate a likely attempt to direct users to potentially malicious content or to manipulate search engine rankings. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/3735732730737738/Nothing-but-the-Girl-The-Blatant-Lesbian-Image-by-Susie-Bright.pdf
    • http://cefasfese.4pu.com/3730730734739731/The-Best-American-Erotica-2007-by-Susie-Bright.pdf
    • http://cefasfese.4pu.com/3730730737735731/The-Best-American-Erotica-1997-by-Susie-Bright.pdf
    • http://cefasfese.4pu.com/3730730737735732/The-Best-American-Erotica-2001-by-Susie-Bright.pdf
    • http://cefasfese.4pu.com/3730730737736734/The-Best-American-Erotica-2003-by-Susie-Bright.pdf
    • http://cefasfese.4pu.com/3730730735732736/The-Best-American-Erotica-1999-by-Susie-Bright.pdf
    • http://cefasfese.4pu.com/3730730737735737/The-Best-American-Erotica-1996-by-Susie-Bright.pdf
    • http://cefasfese.4pu.com/3738735733734735/Bitten-Dark-Erotic-Stories-by-Susie-Bright.pdf
    • http://cefasfese.4pu.com/3731736736731738/Herotica-A-Collection-of-Women-s-Erotic-Fiction-by-Susie-Bright.pdf
    • http://cefasfese.4pu.com/3730730735730737/Totally-Herotica-A-Collection-Of-Women-s-Erotic-Fiction-by-Susie-Bright.pdf
    • http://cefasfese.4pu.com/2730737730738730/I-m-Lesbian-Girl-To-Girl-Talk-by-Zoe-Jasmine.pdf
    • http://cefasfese.4pu.com/1738733731738736/Secrets-of-an-Old-Typewriter-Stories-from-a-Smart-and-Sassy-Small-Town-Girl-by-Susie-Duncan-Sexton.pdf
    • http://cefasfese.4pu.com/1732731739737737/The-Teacher-Is-My-Lesbian-Slave-Lesbian-Blackmail-amp-BDSM-by-Alicia-Castelle.pdf
    • http://cefasfese.4pu.com/7737737733738736/Time-Narrative-amp-the-Fixed-Image-Temps-Narration-amp-Image-Fixe-by-Mireille-Ribiere.pdf
    • http://cefasfese.4pu.com/6731735736736730/Susie-Dent-s-Weird-Words-by-Susie-Dent.pdf
    • http://cefasfese.4pu.com/1730738735732734731/My-Boss-Marilyn-And-My-New-Extra-Job-Duties-A-Lesbian-Seduction-Erotica-Story-A-Lesbian-Seduction-Erotica-Story-by-Geena-Flix.pdf
    • http://cefasfese.4pu.com/3733737736733730/Bright-Horizons-Bright-Horizons-1-by-Wilson-Harp.pdf
    • http://cefasfese.4pu.com/3736739730735735/Girl-with-the-Dragon-Tattoo-Trilogy-Bundle-The-Girl-with-the-Dragon-Tattoo-The-Girl-Who-Played-with-Fire-The-Girl-Who-Kicked-the-Hornet-s-Nest-by-Stieg-Larsson.pdf
    • http://cefasfese.4pu.com/3739730734736731/I-Wish-I-Could-Say-I-Was-Sorry-by-Susie-Kelly.pdf
    • http://cefasfese.4pu.com/2738738734738737/The-Thirteen-by-Susie-Moloney.pdf
    • http://cefasfese.4pu.com/173873

Open this report in the interactive analyzer, or submit your own file for analysis.