Malicious PDF — malware analysis report

Static analysis result for SHA-256 5c2341f1773361fe…

MALICIOUS

PDF

18.2 KB Created: 2020-02-13 22:24:42 +00:00 Authoring application: mPDF 5.7
MD5: d6f242106effa044c346e0054509dcc0 SHA-1: a30060f3df09d802a1165f116a7b4488fbae5397 SHA-256: 5c2341f1773361fe3cf1eacf634df33e36bb26a5d1deb671f07bc77f6fd8fc85
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links pointing to external PDF files hosted on the domain 'calistazz.myhome.cx'. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9807

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://calistazz.myhome.cx/4861867863860860/The-Monkey-Bridge-by-Rafe-Martin.pdf
    • http://calistazz.myhome.cx/4866863866860865/Monkey-Makes-Havoc-In-Heaven-Monkey-Series-in-English-1-by-Xu-Li.pdf
    • http://calistazz.myhome.cx/4867865868869861/Monkey-See-Monkey-Do-Drunk-Monkeys-9-by-Tymber-Dalton.pdf
    • http://calistazz.myhome.cx/6860868862866861/Night-Monkey-Day-Monkey-by-Julia-Donaldson.pdf
    • http://calistazz.myhome.cx/4860863863867865/Old-London-Bridge-The-Story-of-the-Longest-Inhabited-Bridge-in-Europe-by-Patricia-Pierce.pdf
    • http://calistazz.myhome.cx/2862862860866862/The-Great-Bridge-The-Epic-Story-of-the-Building-of-the-Brooklyn-Bridge-by-David-McCullough.pdf
    • http://calistazz.myhome.cx/9868860861864861/The-Great-Bridge-The-Epic-Story-of-the-Building-of-the-Brooklyn-Bridge-by-David-McCullough.pdf
    • http://calistazz.myhome.cx/1864861865868869/The-Brooklyn-Bridge-The-Story-of-the-World-s-Most-Famous-Bridge-and-the-Remarkable-Family-That-Built-It-by-Elizabeth-Mann.pdf
    • http://calistazz.myhome.cx/3861861861863869/Grand-Slam-More-Recipes-from-the-Best-of-Bridge-by-Best-of-Bridge.pdf
    • http://calistazz.myhome.cx/3861861861860863/Winners-More-Recipes-from-the-Best-of-Bridge-by-Best-of-Bridge.pdf
    • http://calistazz.myhome.cx/3861861861863864/Aces-More-Recipes-from-the-Best-of-Bridge-by-Best-of-Bridge.pdf
    • http://calistazz.myhome.cx/3861861861861860/The-Rest-Of-The-Best-And-More-From-The-Best-Of-Bridge-Series-Vol-2-by-Best-of-Bridge.pdf
    • http://calistazz.myhome.cx/2862865862863/The-Rainbow-Bridge-Bridge-to-Inner-Peace-and-to-World-Peace-by-Brent-N-Hunter.pdf
    • http://calistazz.myhome.cx/3868869861864861/At-Home-in-Wishing-Bridge-Wishing-Bridge-2-by-Ruth-Logan-Herne.pdf
    • http://calistazz.myhome.cx/3865863866866868/Sun-Bridge-amp-Sword-The-Final-War-Bridge-amp-Sword-10-by-J-C-Andrijeski.pdf
    • http://calistazz.myhome.cx/9866866869861/The-Monkey-s-Paw-by-W-W-Jacobs.pdf
    • http://calistazz.myhome.cx/5864866860866861/The-Monkey-s-Paw-by-W-W-Jacobs.pdf
    • http://calistazz.myhome.cx/1869861864865861/The-Old-Man-amp-The-Monkey-by-George-Polley.pdf
    • http://calistazz.myhome.cx/1866869863867866/The-Chaos-Monkey-by-Jaq-D-Hawkins.pdf
    • http://calistazz.myhome.cx/6866860868867862/No-He-s-Not-a-Monkey-He-s-an-Ape-and-He-s-My-Son-by-Hester-Mundis.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.