Malicious PDF — malware analysis report

Static analysis result for SHA-256 60924a3c1ee79614…

MALICIOUS

PDF

16.1 KB Created: 2019-04-30 06:01:04 +01:00 Authoring application: mPDF 5.7
MD5: 8b1964f8e2a0dbcda32a33bc3c0d2996 SHA-1: 3f56c69705f131a436860837bdc731bc4d4bc32e SHA-256: 60924a3c1ee79614f264f61b321180f3811ac6eb3b7d7c82ce9c48f844f44209
100 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified as a link farm, suggesting an attempt to manipulate search engine results or direct users to potentially malicious content. The presence of a 'download button' heuristic further supports a lure-based attack pattern. While no scripts were directly extracted, the PDF structure and embedded URLs indicate a malicious intent to redirect users.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9811

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/2a00a03a07a09a00/Nura-Rise-of-the-Yokai-Clan-Vol-04-Nura-Rise-of-the-Yokai-Clan-4-by-Hiroshi-Shiibashi.pdf
    • http://muicuiu.dumb1.com/5a00a04a01a03a03/Nura-Rise-of-the-Yokai-ClanVol-1-by-Hiroshi-Shiibashi.pdf
    • http://muicuiu.dumb1.com/7a03a08a05a00a06/Nura-le-seigneur-des-y-kai---Tome-1-by-Hiroshi-Shiibashi.pdf
    • http://muicuiu.dumb1.com/2a08a07a03a03a02/Clan-Honor-and-Empire-Clan-Beginnings-3-by-Tracy-St-John.pdf
    • http://muicuiu.dumb1.com/2a09a02a00a03a09/Yokai-by-Rebecca-Weinstein.pdf
    • http://muicuiu.dumb1.com/7a06a04a08a03a00/MacLaren-The-Origins-of-the-Clan-MacLaren-and-Their-Place-in-History-Scottish-Clan-Mini-Book-by-George-Forbes.pdf
    • http://muicuiu.dumb1.com/6a09a06a04a07a07/Hy-rei-Shink-ron-Y-kai-Kenky-E-No-Kokoromi-by-Kazuhiko-Komatsu.pdf
    • http://muicuiu.dumb1.com/2a07a03a08a03a08/The-Virgin-of-Clan-Sinclair-Clan-Sinclair-3-by-Karen-Ranney.pdf
    • http://muicuiu.dumb1.com/4a01a07a08a04a02/Silver-Wolf-Clan-Silver-Wolf-Clan-1-by-Tera-Shanley.pdf
    • http://muicuiu.dumb1.com/4a02a06a04a00a09/Rise-as-One-Rise-1-by-Ashok-K-Banker.pdf
    • http://muicuiu.dumb1.com/4a01a02a04a04a01/The-Rise-of-the-Iliri-Volumes-1-3-Rise-of-the-Iliri-1-3-by-Auryn-Hadley.pdf
    • http://muicuiu.dumb1.com/1a03a03a06a06a03/Rise-Again-Rise-Again-1-by-Ben-Tripp.pdf
    • http://muicuiu.dumb1.com/2a01a04a06a02a03/Rise-of-the-Dragons-Rise-of-the-Dragons-1-by-Angie-Sage.pdf
    • http://muicuiu.dumb1.com/4a00a00a01a04a08/Mia-The-Bradshaw-Clan-by-J-A-McCorkle.pdf
    • http://muicuiu.dumb1.com/2a01a04a09a03a02/L-O-S-T-Clan-of-Macaulay-2-by-R-S-Guthrie.pdf
    • http://muicuiu.dumb1.com/1a02a04a09a06a03/The-Clan-Play-to-Live-2-by-D-Rus.pdf
    • http://muicuiu.dumb1.com/5a08a00a07a08a09/Le-Clan-du-sorgho-rouge-by-Mo-Yan.pdf
    • http://muicuiu.dumb1.com/1a00a09a04a01a02a03/Blood-Moon-Cat-Clan-2-by-C-L-Bevill.pdf
    • http://muicuiu.dumb1.com/3a01a08a04a03a05/Clan-Ground-by-Clare-Bell.pdf
    • http://muicuiu.dumb1.com/3a07a00a06a05a08/The-Call-From-Within-Dearhart-Clan-1-by-Eri-Nelson.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.