PDF malware analysis — malicious · 5d491e879390322c

MALICIOUS

PDF

50.6 KB Created: 2020-11-08 00:10:07 +02:00 Authoring application: wkhtmltopdf 0.12.5 (via Qt 4.8.7)

MD5: de663d4f9970e5a6e2f3f5a64912a093 SHA-1: ea60928a2b99b4a935433449297e8b4eb2dfc84b SHA-256: 5d491e879390322cca360d6b7ecbecc100dc3c6d44400bcb5b3a344103be94e3

62 Risk Score

Malware Insights

MITRE ATT&CK

T1566.001 Spearphishing Attachment

The PDF file contains an embedded URL that redirects to a known malicious domain. This indicates an attempt to lure the user to a compromised site, likely for further exploitation or credential harvesting. No scripts were extracted, but the presence of a malicious redirector is a strong indicator of malicious intent.

Machine Learning

Nyx PDF Classifier suspicious score 0.4145

Heuristics 2

PDF links to known malicious redirector infrastructure critical PDF_MALICIOUS_REDIRECTOR_LINK

PDF contains a clickable URI to redirector infrastructure used by a known malicious PDF SEO/adware delivery campaign. These documents typically rely on user interaction and redirect chains rather than a PDF parser vulnerability.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.

URL https://traffmen.ru/aws?keyword=what+is+a+task+group+in+social+work

Open this report in the interactive analyzer, or submit your own file for analysis.