Malicious PDF — malware analysis report

Static analysis result for SHA-256 55edbf94c6809869…

MALICIOUS

PDF

24.7 KB Created: 2019-05-01 11:58:44 +01:00 Authoring application: mPDF 5.7
MD5: a62bbedd33c096f685116767901f507a SHA-1: fb9ca2f203b16ef8bb8e0419648914b2d0e24381 SHA-256: 55edbf94c6809869c36143d5c886c6afee9e6fa213c67d1d461d9ba93afea37c
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links to external PDF documents hosted on the domain 'seasasac.lflinkup.com'. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier also strongly flagged this PDF as malicious. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9906

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://seasasac.lflinkup.com/6da2da4da6da3da4/Emanuel-Swedenborg-by-Christopher-Hasler.pdf In PDF document text
    • http://seasasac.lflinkup.com/9da7da6da8da3da8/Seele-und-Leib-by-Emanuel-Swedenborg.pdfIn PDF document text
    • http://seasasac.lflinkup.com/6da2da4da6da4da0/Divine-Providence-by-Emanuel-Swedenborg.pdfIn PDF document text
    • http://seasasac.lflinkup.com/6da2da4da5da9da4/Divine-Love-and-Wisdom-by-Emanuel-Swedenborg.pdfIn PDF document text
    • http://seasasac.lflinkup.com/6da2da4da5da5da8/Our-Life-after-Death-A-Firsthand-Account-from-an-18th-Century-Scientist-and-Seer-by-Emanuel-Swedenborg.pdfIn PDF document text
    • http://seasasac.lflinkup.com/3da2da9da8da3da8/The-Myth-of-a-Christian-Religion-Losing-Your-Religion-for-the-Beauty-of-a-Revolution-by-Gregory-A-Boyd.pdfIn PDF document text
    • http://seasasac.lflinkup.com/1da1da3da3da6da5da0/Romantik-Und-Religion-Heinrich-Heines-Suche-Nach-Identitat-Christian-Hopfner-by-Christian-Hopfner.pdfIn PDF document text
    • http://seasasac.lflinkup.com/3da6da9da1da1/Why-I-Am-Not-a-Christian-and-Other-Essays-on-Religion-and-Related-Subjects-by-Bertrand-Russell.pdfIn PDF document text
    • http://seasasac.lflinkup.com/4da2da3da3da0da9/The-American-Religion-The-Emergence-of-The-Post-Christian-Nation-by-Harold-Bloom.pdfIn PDF document text
    • http://seasasac.lflinkup.com/6da5da0da6da3da7/The-Genius-of-Christianity-or-the-Spirit-and-Beauty-of-the-Christian-Religion-by-Fran-ois-Ren-de-Chateaubriand.pdfIn PDF document text
    • http://seasasac.lflinkup.com/1da1da9da2da9da6da7/The-Truth-of-the-Christian-Religion-with-Jean-Le-Clerc-s-Notes-and-Additions-by-Hugo-Grotius.pdfIn PDF document text
    • http://seasasac.lflinkup.com/3da2da2da3da9da5/Faith-The-Essence-of-True-Religion-by-Gordon-B-Hinckley.pdfIn PDF document text
    • http://seasasac.lflinkup.com/3da6da5da6da0da5/The-Outsider-Test-for-Faith-How-to-Know-Which-Religion-Is-True-by-John-W-Loftus.pdfIn PDF document text
    • http://seasasac.lflinkup.com/7da3da9da9da5da2/My-Name-Used-to-Be-Muhammed-The-True-Story-of-a-Muslim-Who-Became-a-Christian-by-Tito-Momen-with-Jeff-Benedict.pdfIn PDF document text
    • http://seasasac.lflinkup.com/8da8da2da8da1/The-Heavenly-Man-The-Remarkable-True-Story-of-Chinese-Christian-Brother-Yun-by-Paul-Hattaway.pdfIn PDF document text
    • http://seasasac.lflinkup.com/7da3da8da4da8da3/Travesty-in-Haiti-A-True-Account-of-Christian-Missions-Orphanages-Fraud-Food-Aid-and-Drug-Trafficking-by-Timothy-T-Schwartz.pdfIn PDF document text
    • http://seasasac.lflinkup.com/4da2da4da1da8da4/Religion-for-Atheists-A-Non-believer-s-Guide-to-the-Uses-of-Religion-by-Alain-de-Botton.pdfIn PDF document text
    • http://seasasac.lflinkup.com/4da2da8da8da2da5/Swedenborg-Buddha-of-the-North-by-D-T-Suzuki.pdfIn PDF document text
    • http://seasasac.lflinkup.com/2da5da3da5da5da8/A-Lion-Called-Christian-The-True-Story-of-the-Remarkable-Bond-Between-Two-Friends-and-a-Lion-by-Anthony-Bourke.pdfIn PDF document text
    • http://seasasac.lflinkup.com/4da7da8da6da7/A-Lion-Called-Christian-The-True-Story-of-the-Remarkable-Bond-Between-Two-Friends-and-a-Lion-by-Anthony-Bourke.pdfIn PDF document text
    • http://seasasac.lflinkup.com/1da1da3da3da6da5da0/Romantik-UnIn PDF document text