Malicious PDF — malware analysis report

Static analysis result for SHA-256 539295c3a27fcd1a…

MALICIOUS

PDF

15.0 KB Created: 2019-11-07 22:18:18 +00:00 Authoring application: mPDF 5.7
MD5: 29cce4e1615e1e9ea307b5008726669a SHA-1: e55766d706864af238ab611b602b4084bafdece0 SHA-256: 539295c3a27fcd1a3b0e2468599ab998c2e27fafd6b96ad2ae0dbca7903b7986
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of links to external PDF documents, hosted on the domain 'cefasfese.4pu.com'. This behavior is indicative of a link farm or a lure to download further malicious content. The ML classifier also flagged this PDF as malicious with a high probability. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9798

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/3736737734736738/Hunger-of-the-Wolf-Wolfen-3-by-Madelaine-Montague.pdf
    • http://cefasfese.4pu.com/4732733737734735/Wolfen-by-Madelaine-Montague.pdf
    • http://cefasfese.4pu.com/7733739732730/Wolfen-Wolfen-1-by-Madelaine-Montague.pdf
    • http://cefasfese.4pu.com/4732733737733730/Wolf-by-Madelaine-Montague.pdf
    • http://cefasfese.4pu.com/1737734735738733/Darkling-Seas-by-Madelaine-Montague.pdf
    • http://cefasfese.4pu.com/2734735736735735/Hunger-Makes-the-Wolf-The-Ghost-Wolves-1-by-Alex-Wells.pdf
    • http://cefasfese.4pu.com/9730730737736738/Denying-His-Wolfen-Heritage-A-Wolfen-Heritage-2-by-Missy-Martine.pdf
    • http://cefasfese.4pu.com/9730730737736737/Discovering-Her-Wolfen-Heritage-A-Wolfen-Heritage-1-by-Missy-Martine.pdf
    • http://cefasfese.4pu.com/9730731730737732/Hunted-in-Wolfen-Wood-A-BBW-Paranormal-Shape-Shifter-Romance-Wolfen-Wood-Paranormal-Romance-Series-Book-2-by-Megan-Tisdale.pdf
    • http://cefasfese.4pu.com/1734737731735735/Hunger-Embraced-Hunger-1-by-Jennifer-James.pdf
    • http://cefasfese.4pu.com/4732737735736739/New-Scotia-Pack-Box-Set-Shield-Wolf-Wolf-Lover-Fire-Wolf-by-Victoria-Danann.pdf
    • http://cefasfese.4pu.com/1730734733733736/The-Wolfen-by-Whitley-Strieber.pdf
    • http://cefasfese.4pu.com/9730730739731736/Shadow-of-the-Wolfen-by-C-Z-Obermeier.pdf
    • http://cefasfese.4pu.com/3732738734735737/The-Wolfen-by-Whitley-Strieber.pdf
    • http://cefasfese.4pu.com/1738731734/Wolf-by-Wolf-Wolf-by-Wolf-1-by-Ryan-Graudin.pdf
    • http://cefasfese.4pu.com/3731730735732733/Her-Wolfen-Destiny-by-Dakota-Trace.pdf
    • http://cefasfese.4pu.com/9730730738734738/Wolfen-Wood-by-Megan-Tisdale.pdf
    • http://cefasfese.4pu.com/9730730738736731/It-Takes-Two-to-Heal-The-Wolfen-2-by-Marla-Monroe.pdf
    • http://cefasfese.4pu.com/9730730739732731/The-Drosselmeier-Chronicles-The-Solstice-Tales-by-Wolfen-M-.pdf
    • http://cefasfese.4pu.com/7732733735735738/Jade-Three-J-Amigos-1-by-Rose-Montague.pdf
    • http://cefasfese.4pu.com/1734737731735735/Hunger-Embrace

Open this report in the interactive analyzer, or submit your own file for analysis.