Malicious PDF — malware analysis report

Static analysis result for SHA-256 53e73fc4fc54267c…

MALICIOUS

PDF

18.2 KB Created: 2020-03-18 21:07:51 +00:00 Authoring application: mPDF 5.7
MD5: 34c4b5afaf69b5f601bdb51fe1369e91 SHA-1: 580f8dd61ff5c19fed4dfcad4c179ce2f9a45821 SHA-256: 53e73fc4fc54267c9835c98abfe6fc2c811658fe82db7849f748afd250f86a59
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded URLs, a technique often used for SEO poisoning to drive traffic to malicious sites. The ML classifier also strongly indicated maliciousness. No scripts were extracted, but the sheer volume of links suggests a redirection or phishing attempt.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ieuicufioao.myhome.cx/2551557555557553/Waltz-across-Texas-with-a-Shoe-and-a-Fart-by-Mark-Mills.pdf
    • http://ieuicufioao.myhome.cx/4559559559559554/A-Texas-Legacy-Christmas-Texas-Legacy-4-by-DiAnn-Mills.pdf
    • http://ieuicufioao.myhome.cx/5550550550558558/Texas-Legacy-Trilogy-by-DiAnn-Mills.pdf
    • http://ieuicufioao.myhome.cx/5557557550555/Lightning-And-Lace-Texas-Legacy-3-by-DiAnn-Mills.pdf
    • http://ieuicufioao.myhome.cx/4554555558553/Shoe-Addicts-Anonymous-Shoe-Addict-1-by-Beth-Harbison.pdf
    • http://ieuicufioao.myhome.cx/1555553556554557/Amagansett-by-Mark-Mills.pdf
    • http://ieuicufioao.myhome.cx/2552555553557559/Amagansett-by-Mark-Mills.pdf
    • http://ieuicufioao.myhome.cx/4551551550553551/Darkness-Falls-Mark-Beamon-5-by-Kyle-Mills.pdf
    • http://ieuicufioao.myhome.cx/1553554551555557/Secrets-of-a-Shoe-Addict-Shoe-Addict-2-by-Beth-Harbison.pdf
    • http://ieuicufioao.myhome.cx/2555554557557553/The-Day-My-Fart-Followed-Santa-Up-The-Chimney-by-Ben-Jackson.pdf
    • http://ieuicufioao.myhome.cx/2550550553554558/Heart-of-Texas-Vol-1-Lonesome-Cowboy-Texas-Two-Step-Heart-of-Texas-1-2-by-Debbie-Macomber.pdf
    • http://ieuicufioao.myhome.cx/6553557550550559/101-Funky-Fuming-Fart-Facts-by-Elias-Hill.pdf
    • http://ieuicufioao.myhome.cx/9559554552554553/The-Fantastic-Flatulent-Fart-Brothers-Save-the-World-A-Comedy-Thriller-Adventure-that-Truly-Stinks-US-edition-by-M-D-Whalen.pdf
    • http://ieuicufioao.myhome.cx/4555559550559551/Texas-Bossa-Nova-Texas-Montgomery-Mavericks-5-by-Cynthia-D-39-Alba.pdf
    • http://ieuicufioao.myhome.cx/4557556554555555/A-Match-Made-in-Texas-Deep-in-the-Heart-of-Texas-6-by-Katie-Lane.pdf
    • http://ieuicufioao.myhome.cx/2553550554557550/Texas-Glory-Leigh-Brothers-Texas-Trilogy-2-by-Lorraine-Heath.pdf
    • http://ieuicufioao.myhome.cx/2555552551552/The-Texas-Renegade-Returns-Texas-Cattleman-s-Club-A-Missing-Mogul-10-by-Charlene-Sands.pdf
    • http://ieuicufioao.myhome.cx/1555550551558555/Escape-from-Texas-A-Novel-of-Slavery-and-the-Texas-War-of-Independence-by-James-W-Russell.pdf
    • http://ieuicufioao.myhome.cx/2558551552553557/Texas-Twist-Texas-Montgomery-Mavericks-4-by-Cynthia-D-39-Alba.pdf
    • http://ieuicufioao.myhome.cx/1557559558552551/Trouble-in-Texas-Deep-in-the-Heart-of-Texas-4-by-Katie-Lane.pdf
    • http://ieuicufioao.myhome.cx/6553557550550559/101-Funky-Fuming-Fa

Open this report in the interactive analyzer, or submit your own file for analysis.