Malicious PDF — malware analysis report

Static analysis result for SHA-256 5375f05555416b8d…

MALICIOUS

PDF

14.8 KB Created: 2019-11-07 21:45:44 +00:00 Authoring application: mPDF 5.7
MD5: 9e3f83573c4db070ca4639723199bd40 SHA-1: 4007b3246fafcbd669ce348595190f43e8a02010 SHA-256: 5375f05555416b8dcf548b74f72eea29e4ab9880ead6f6a12221c86d920465c5
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF document was flagged by a machine learning classifier as malicious. It contains a large number of embedded links, identified as a 'PDF_SEO_LINK_FARM' heuristic, pointing to external PDF files. While the specific intent of these links is unclear without further analysis of the linked content, the sheer volume and the ML classification suggest a malicious purpose, potentially for SEO manipulation or distributing further malware. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9798

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/3735732739730736/Diamond-in-the-Shade-1-by-D-J-Manly.pdf
    • http://cefasfese.4pu.com/2738730735737732/The-Diamond-That-Cuts-Through-Illusion-Commentaries-on-the-Prajnaparamita-Diamond-Sutra-by-Thich-Nhat-Hanh.pdf
    • http://cefasfese.4pu.com/2736732739738732/A-Shade-of-Vampire-A-Shade-Of-Vampire-1-by-Bella-Forrest.pdf
    • http://cefasfese.4pu.com/4730730734733/A-Shade-of-Vampire-A-Shade-of-Vampire-1-by-Bella-Forrest.pdf
    • http://cefasfese.4pu.com/1733731739733738/Inventions-By-Diamond-by-Diamond-W-Fields.pdf
    • http://cefasfese.4pu.com/9738739736734734/Diamond-In-The-Ruff-3-Diamond-In-The-Ruff-by-Yolanda-Diamond.pdf
    • http://cefasfese.4pu.com/1739739732733733/Summer-by-D-J-Manly.pdf
    • http://cefasfese.4pu.com/1739732737733738/Survival-by-D-J-Manly.pdf
    • http://cefasfese.4pu.com/4730732734738737/So-Much-More-Than-Naked-1-by-D-J-Manly.pdf
    • http://cefasfese.4pu.com/4736731735738735/Last-Call-by-D-J-Manly.pdf
    • http://cefasfese.4pu.com/4730732739739732/So-Much-More-Than-Naked-2-by-D-J-Manly.pdf
    • http://cefasfese.4pu.com/4739734732732737/Marry-Me-Or-Die-by-D-J-Manly.pdf
    • http://cefasfese.4pu.com/1730739735733734732/Higher-Learning-by-D-J-Manly.pdf
    • http://cefasfese.4pu.com/4734738736730737/Kelsey-s-Present-by-D-J-Manly.pdf
    • http://cefasfese.4pu.com/3738731731736734/Beloved-Foe-Eternal-Souls-2-by-D-J-Manly.pdf
    • http://cefasfese.4pu.com/5733731730736/Diamond-Dust-Peter-Diamond-7-by-Peter-Lovesey.pdf
    • http://cefasfese.4pu.com/8735733736738732/Esoteric-Philosophy-of-H-P-Blavatsky-by-Manly-P-Hall.pdf
    • http://cefasfese.4pu.com/8732731738732732/50-Ways-to-Use-Feminine-Hygiene-Products-in-a-Manly-Manner-by-B-Koz.pdf
    • http://cefasfese.4pu.com/2738733733736735/Relativity-and-Quantum-Physics-For-Beginners-by-Steven-L-Manly.pdf
    • http://cefasfese.4pu.com/2738737739739735/The-Old-Gods-Waken-Silver-John-1-by-Manly-Wade-Wellman.pdf
    • http://cefasfese.4pu.com/4736731735

Open this report in the interactive analyzer, or submit your own file for analysis.