Malicious PDF — malware analysis report

Static analysis result for SHA-256 5775ea70c5d87eec…

MALICIOUS

PDF

17.2 KB Created: 2019-04-30 06:26:22 +01:00 Authoring application: mPDF 5.7
MD5: 0cde8968bf168c4c7d0c6b715ab1d457 SHA-1: 411aab280c362a562ad5aa094ad5846df02dc426 SHA-256: 5775ea70c5d87eec33ad901d7f712c93e3480dc6f437d9273fd441d2b9097002
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF document contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While the specific URLs extracted appear benign, the sheer volume and structure suggest a malicious intent, possibly for SEO poisoning or to act as a redirector to malicious sites. The ML_NYX_PDF_MALICIOUS classifier also strongly indicated maliciousness. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9787

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/3a06a06a00a04a07/Life-in-the-Fast-Lane-2nd-edition-Fast-Lane-Series-by-Michelle-McCorkle.pdf
    • http://muicuiu.dumb1.com/4a05a07a03a08a08/Boys-of-the-Fast-Lane-by-Zack.pdf
    • http://muicuiu.dumb1.com/1a01a00a02a06a03a02/Malibu-Bride-Fast-Lane-Romance-2-by-D-C-Thome.pdf
    • http://muicuiu.dumb1.com/2a07a03a01a04a02/The-Man-in-the-White-Suit-The-Stig-Le-Mans-the-Fast-Lane-and-Me-by-Ben-Collins.pdf
    • http://muicuiu.dumb1.com/1a00a03a03a00a06a05/Palm-Springs-Heat-Fast-Lane-Romance-1-by-D-C-Thome.pdf
    • http://muicuiu.dumb1.com/3a00a08a09a01a03/Express-Lane-Cookbook-Fast-Healthful-Meals-with-Minimal-Cleanup-by-Sarah-Fritschner.pdf
    • http://muicuiu.dumb1.com/5a09a03a09a09/Fast-Tracked-Fast-Track-Trilogy-1-by-Tracy-Rozzlynn.pdf
    • http://muicuiu.dumb1.com/5a00a01a08a00/Fast-Trapped-Fast-Track-Trilogy-2-by-Tracy-Rozzlynn.pdf
    • http://muicuiu.dumb1.com/1a03a02a07a08a08/Hard-and-Fast-Fast-Track-2-by-Erin-McCarthy.pdf
    • http://muicuiu.dumb1.com/9a07a03a06a09a01/A-Fast-Guide-To-A-Fast-Computer-by-Andrew-Blecher.pdf
    • http://muicuiu.dumb1.com/1a00a05a01a03a09a01/Fast-Fury-DEA-FAST-5-by-Kaylea-Cross.pdf
    • http://muicuiu.dumb1.com/1a02a04a06a00a05/Fast-Fast-1-by-Ryan-Ringbloom.pdf
    • http://muicuiu.dumb1.com/8a04a00a07a09a05/Daniel-Fast-Pasta-30-Daniel-Fast-Pasta-Recipes-For-Everyday-Cooking-by-Dee-Wallace.pdf
    • http://muicuiu.dumb1.com/1a07a06a07/Fast-Girl-A-Life-Spent-Running-from-Madness-by-Suzy-Favor-Hamilton.pdf
    • http://muicuiu.dumb1.com/2a00a09a09a08a06/Hunting-the-Tiger-The-Fast-Life-and-Violent-Death-of-the-Balkans-Most-Dangerous-Man-by-Christopher-S-Stewart.pdf
    • http://muicuiu.dumb1.com/9a00a00a07a03a06/Full-Throttle-The-Life-amp-Fast-Times-of-Racing-Legend-Curtis-Turner-by-Robert-Edelstein.pdf
    • http://muicuiu.dumb1.com/3a03a03a06a00a00/The-Mothers-of-Lovely-Lane-Lovely-Lane-3-by-Nadine-Dorries.pdf
    • http://muicuiu.dumb1.com/4a02a07a01a01a04/Life-in-the-Fat-Lane-by-Cherie-Bennett.pdf
    • http://muicuiu.dumb1.com/3a01a05a05a08a06/Life-in-the-Fat-Lane-by-Cherie-Bennett.pdf
    • http://muicuiu.dumb1.com/3a01a04a01a03a05/The-Diamond-of-Drury-Lane-Cat-Royal-Series-Book-1-by-Julia-Golding.pdf
    • http://muicuiu.dumb1.com/1a03a02a07a08a08/Hard-and-Fast-Fas

Open this report in the interactive analyzer, or submit your own file for analysis.