Malicious PDF — malware analysis report

Static analysis result for SHA-256 586cc65cd12839a0…

MALICIOUS

PDF

31.7 KB Created: 2019-05-01 09:23:57 +01:00 Authoring application: mPDF 5.7
MD5: 15c06ee6e39f28e48e8dddf527e80d92 SHA-1: 97dfd44c8ffb4fd527a7e71ff9675b30813610c2 SHA-256: 586cc65cd12839a04972864610aca39604b201bf98116d08571fa07800cc3ecd
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external websites, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged the document as malicious. The primary attack pattern observed is the creation of a link farm, likely intended to direct users to potentially malicious content or phishing sites.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9684

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfes
    • http://cefasfese.4pu.com/1730734730737737732/Tabulose-Doktorspiele-Sexs-chtige-Krankenschwester-stellt-sich-als-Lustobjekt-zur-Verf-gung-by-Anna-Herrmanns.pdf
    • http://cefasfese.4pu.com/9732734734738737/Lehrerbildung-Fuer-Morgen-Wissenschaftlicher-Nachwuchs-Stellt-Sich-VOR-by-Sabine-Andresen.pdf
    • http://cefasfese.4pu.com/9736733736734736/Ladendiebstahl-lohnt-sich-by-Anna-Summers.pdf
    • http://cefasfese.4pu.com/9736733737738730/Kindle-Unlimited---Lohnt-sich-das-Wie-Sie-als-Leser-oder-Autor-das-Beste-f-r-sich-rausholen-by-Markus-Tillmanns.pdf
    • http://cefasfese.4pu.com/9736732737732731/Doktorspiele-Gest-ndnisse-eines-Hochstaplers-by-Gert-Postel.pdf
    • http://cefasfese.4pu.com/1730734737737736731/Die-woll-stige-Krankenschwester-Unterwerfung-by-Lola-Hammerfeld.pdf
    • http://cefasfese.4pu.com/1731739733733730738/An-sich-Sein-F-r-sich-Sein-und-der-Andere-bei-Sartre-und-seine-Bez-ge-auf-Hegel-by-Christian-Walter.pdf
    • http://cefasfese.4pu.com/1730734730737737734/Bount-Reiniger-stellt-eine-Falle-New-York-Detectives-by-Wolf-G-Rahn.pdf
    • http://cefasfese.4pu.com/9730737733731730/Verliebt-bis-der-Arzt-kommt-Eine-Krankenschwester-im-siebten-Himmel-by-Cornelia-Fricke.pdf
    • http://cefasfese.4pu.com/1730737730734739732/Gung-Ho-Wie-Sie-jedes-Team-in-H-chstform-bringen-by-Kenneth-H-Blanchard.pdf
    • http://cefasfese.4pu.com/1730732735738737738/Wessobrunnische-Marianische-Fama-in-Sich-Haltend-Die-Weitere-Merckw-Rdigiste-Begebenheiten-Welche-Sich-In--Und-Um-Das-Jahr-1745-Ereignet-Bey-Der-Hoch--Und-Weltber-Hmten-Haupt-Bruderschafft-Der-Unbefleckten-Emf-Ngnu-Mariae-Der-Wunderth-Tigen-by-Veremund-Eisvogel.pdf
    • http://cefasfese.4pu.com/1730739731733734738/Zur-Eingeborenen-Frage-in-Deutsch-S-dwest-Afrika-Erw-gung-Und-Vorschl-ge-by-G-Hauleiter.pdf
    • http://cefasfese.4pu.com/8731735736735733/Wilder-Sex-Frivole-Spiele-tabulose-Exzesse-flotte-Dreier-Partnertausch-und-hei-e-Aff-ren-Die-besten-Sex-Geschichten-in-der-Literatur-by-Melisande-Delon.pdf
    • http://cefasfese.4pu.com/9735734731733730/Restoring-Your-Life-Energy-Simple-Chi-Gung-Practices-to-Reduce-Stress-and-Enhance-Well-Being-by-Waysun-Liao.pdf
    • http://cefasfese.4pu.com/1730734732738734731/Der-Gute-Forst-Lehrling-Und-Der-T-chtige-F-rster-Enthaltend-Eine-Deutliche-Darstellung-Von-Den-Licht-Und-Schattenseiten-Des-F-rster-Und-J-gerlebens-Der-Erfordernisse-Zum-Eintritt-in-Die-Lehre-Pr-fung-ALS-Forstlehrling-by-Ernst-Wilhelm-Maron.pdf
    • http://cefasfese.4pu.com/1730733731736735735/Sprachgestalt-ALS-Folge-Und-F-gung-Zur-Phonologie-Des-Dolomitenladinischen-Badiot-Und-Seiner-Nachbarn-studien-Zu-Alpinromanischen-Sprachst-nden-in-Norditalien-by-Guntram-Plangg.pdf
    • http://cefasfese.4pu.com/6731737732739731/Anna-of-All-the-Russias-A-Life-of-Anna-Akhmatova-by-Elaine-Feinstein.pdf
    • http://cefasfese.4pu.com/9735738732735734/Anna-Simons-Meisterin-Der-Schriftkunst-1871-1951-Ausstellung-in-Der-Universitats--Und-Stadtbibliothek-Anlasslich-Der-125-Wiederkehr-Ihres-Geburts-by-Anna-Simons.pdf
    • http://cefasfese.4pu.com/6737732739737738/Anna-Banana-and-the-Puppy-Parade-Anna-Banana-4-by-Anica-Mrose-Rissi.pdf
    • http://cefasfese.4pu.com/8730733738731738/Black-Beauty-The-Autobiography-of-a-Horse-by-Anna-Sewell-by-Anna-Sewell.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.