Malicious PDF — malware analysis report

Static analysis result for SHA-256 5e9b4aaa72a2eddf…

MALICIOUS

PDF

16.8 KB Created: 2020-03-18 16:39:52 +00:00 Authoring application: mPDF 5.7
MD5: 4690de0527d0dc3b934f51f9a9d54f12 SHA-1: d11b623a5af3d74c905bc900e3e7f0e342d2e26a SHA-256: 5e9b4aaa72a2eddf2da57f9470ccad4ac2d6927be2e3f894d2a34f33acf622bc
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded URLs pointing to external PDF files hosted on the domain 'easckaolp.myhome.cx'. This pattern is indicative of a link farm designed to distribute malicious content or conduct SEO poisoning. The ML classifier also flagged this PDF as malicious, supporting the assessment of a malicious intent.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9787

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://easckaolp.myhome.cx/8844844846841846/The-Works-of-Thomas-Shepard---Vol-3-Theses-Sabbaticae-by-Thomas-Shepard.pdf
    • http://easckaolp.myhome.cx/7848846840842843/Boone-Shepard-Boone-Shepard-1-by-Gabriel-Bergmoser.pdf
    • http://easckaolp.myhome.cx/4842849846845842/Zen-Mind-Beginner-s-Mind-Informal-Talks-on-Zen-Meditation-and-Practice-by-Shunryu-Suzuki.pdf
    • http://easckaolp.myhome.cx/8845847849842843/Mind-and-Brain-A-Dialogue-on-the-Mind-Body-Problem-by-Rocco-J-Gennaro.pdf
    • http://easckaolp.myhome.cx/4844847844841849/The-Future-of-the-Mind-The-Scientific-Quest-to-Understand-Enhance-and-Empower-the-Mind-by-Michio-Kaku.pdf
    • http://easckaolp.myhome.cx/3845847849845/Battlefield-of-the-Mind-Winning-the-Battle-in-Your-Mind-by-Joyce-Meyer.pdf
    • http://easckaolp.myhome.cx/3842842840849848/Wise-Mind-Open-Mind-Finding-Purpose-and-Meaning-in-Times-of-Crisis-Loss-and-Change-by-Ronald-Alexander.pdf
    • http://easckaolp.myhome.cx/3848849845848845/Half-a-Mind-The-Mind-Sleuth-1-by-Bruce-M-Perrin.pdf
    • http://easckaolp.myhome.cx/1841846847847848/The-Mind-Thieves-Mind-Readers-2-by-Lori-Brighton.pdf
    • http://easckaolp.myhome.cx/1842848846845847/Mind-of-My-Mind-Patternmaster-2-by-Octavia-E-Butler.pdf
    • http://easckaolp.myhome.cx/2847847841844845/Mind-Over-Mind-by-Karina-Lumbert-Fabian.pdf
    • http://easckaolp.myhome.cx/4849844845840842/Of-One-Mind-One-Mind-1-by-Elizabeth-L-Brooks.pdf
    • http://easckaolp.myhome.cx/3848846840845842/You-Think-That-s-Bad-by-Jim-Shepard.pdf
    • http://easckaolp.myhome.cx/9847845846845/Project-X-by-Jim-Shepard.pdf
    • http://easckaolp.myhome.cx/4843846842842844/Day-Out-of-Days-by-Sam-Shepard.pdf
    • http://easckaolp.myhome.cx/7848846840848847/The-One-Inside-by-Sam-Shepard.pdf
    • http://easckaolp.myhome.cx/3842847843849843/H-by-Elizabeth-Shepard.pdf
    • http://easckaolp.myhome.cx/7848846840849841/The-World-to-Come-by-Jim-Shepard.pdf
    • http://easckaolp.myhome.cx/4845844847841842/Like-You-d-Understand-Anyway-by-Jim-Shepard.pdf
    • http://easckaolp.myhome.cx/6849841844848845/Kalimantan-by-Lucius-Shepard.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.