Malicious PDF — malware analysis report

Static analysis result for SHA-256 5837e2d5dc67c480…

MALICIOUS

PDF

18.6 KB Created: 2019-05-01 19:26:15 +01:00 Authoring application: mPDF 5.7
MD5: 8b83906e76b2b2d581a9205e79577072 SHA-1: 2622c36a34d30e1c9609e5a1ff8e2d5c0282b16a SHA-256: 5837e2d5dc67c4808500c411019a1470099d1583a0d446e43f75646c1a5a4373
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links, as indicated by the PDF_SEO_LINK_FARM heuristic. These links point to external PDF files, suggesting a link farm or redirection tactic. The ML_NYX_PDF_MALICIOUS heuristic also flagged the document with high confidence. No scripts were extracted from this sample. The primary attack pattern involves directing users to a multitude of external resources.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9940

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://seasasac.lflinkup.com/5da6da5da0da3da4/--I-lt-gt-Kyoukai-Senjou-no-Horizon-1B-Kyoukai-Senjou-no-Horizon-2-by-Minoru-Kawakami.pdf
    • http://seasasac.lflinkup.com/5da6da5da0da6da5/--III-lt-gt-Kyoukai-Senjou-no-Horizon-3C-Kyoukai-Senjou-no-Horizon-7-by-Minoru-Kawakami.pdf
    • http://seasasac.lflinkup.com/5da6da5da1da2da4/--V-lt-gt-Kyoukai-Senjou-no-Horizon-5B-Kyoukai-Senjou-no-Horizon-12-by-Minoru-Kawakami.pdf
    • http://seasasac.lflinkup.com/5da6da5da1da1da8/--VI-lt-gt-Kyoukai-Senjou-no-Horizon-6A-Kyoukai-Senjou-no-Horizon-13-by-Minoru-Kawakami.pdf
    • http://seasasac.lflinkup.com/5da6da5da1da2da5/--VI-lt-gt-Kyoukai-Senjou-no-Horizon-6B-Kyoukai-Senjou-no-Horizon-14-by-Minoru-Kawakami.pdf
    • http://seasasac.lflinkup.com/5da6da5da0da7da2/--IV-lt-gt-Kyoukai-Senjou-no-Horizon-4-Kyoukai-Senjou-no-Horizon-10-by-Minoru-Kawakami.pdf
    • http://seasasac.lflinkup.com/5da6da5da1da1da0/OBSTACLE--I-Gekitotsu-no-Hexennacht-1-by-Minoru-Kawakami.pdf
    • http://seasasac.lflinkup.com/4da0da0da8da6da6/White-Horizon-by-Jan-Ruth.pdf
    • http://seasasac.lflinkup.com/4da8da5da9da7da7/The-Strange-Horizon-by-G-L-Didaleusky.pdf
    • http://seasasac.lflinkup.com/4da7da8da5da0da5/Horizon-by-Barry-L-pez.pdf
    • http://seasasac.lflinkup.com/3da8da7da0da5da3/Horizon-by-Keith-Stevenson.pdf
    • http://seasasac.lflinkup.com/2da1da4da6da3da9/Lost-Horizon-by-James-Hilton.pdf
    • http://seasasac.lflinkup.com/2da6da0da6da7/Across-the-Event-Horizon-by-Mercurio-D-Rivera.pdf
    • http://seasasac.lflinkup.com/8da7da3da3da3/Horizon-Above-World-3-by-Jenn-Reese.pdf
    • http://seasasac.lflinkup.com/1da8da5da8da0da6/The-Horizon-Arisen-6-by-Glynn-James.pdf
    • http://seasasac.lflinkup.com/2da8da8da9da4da4/Clear-Horizon-Pilgrimage-11-by-Dorothy-M-Richardson.pdf
    • http://seasasac.lflinkup.com/1da1da7da5da9da5/Blue-Horizon-Courtney-11-by-Wilbur-Smith.pdf
    • http://seasasac.lflinkup.com/7da1da5da3/Empty-Horizon-Benjamin-Ashwood-4-by-A-C-Cobble.pdf
    • http://seasasac.lflinkup.com/5da7da8da6da4da4/Les-chasseurs-d-mes-T04-Horizon-by-Alyson-Noel.pdf
    • http://seasasac.lflinkup.com/3da4da5da6da5da3/Far-and-Wide-Bring-that-Horizon-to-Me-by-Neil-Peart.pdf
    • http://seasasac.lflinkup.com/5da6da5da1da2da5/--VI-lt-gt-Kyo

Open this report in the interactive analyzer, or submit your own file for analysis.