Malicious PDF — malware analysis report

Static analysis result for SHA-256 61239355e0b5a15d…

MALICIOUS

PDF

19.6 KB Created: 2019-05-02 05:09:06 +01:00 Authoring application: mPDF 5.7
MD5: 6c0b34fdad76190eb90b289f537c518e SHA-1: 18349a0a92574658fc5f3cd5c84464f5befa1e56 SHA-256: 61239355e0b5a15d6122bff7b26c07595e44c9c54815dc74225066e8d30e7b7c
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified as a link farm. While the URLs themselves are marked as benign, the sheer volume and structure suggest a malicious intent, possibly for SEO manipulation or to distribute further malicious content. The ML classifier also flagged this PDF as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/2737733739734731/You-Are-Not-Me-90s-Coming-of-Age-2-by-Leta-Blake.pdf
    • http://cefasfese.4pu.com/2732734734731734/You-Are-Not-Me-90s-Coming-of-Age-2-by-Leta-Blake.pdf
    • http://cefasfese.4pu.com/3733733735730731/Pictures-of-You-90s-Coming-of-Age-1-by-Leta-Blake.pdf
    • http://cefasfese.4pu.com/4732732736736733/Smoky-Mountain-Dreams-by-Leta-Blake.pdf
    • http://cefasfese.4pu.com/1737731732735732/Will-amp-Patrick-Do-the-Holidays-Wake-Up-Married-3-by-Leta-Blake.pdf
    • http://cefasfese.4pu.com/1737731732737734/Will-amp-Patrick-Meet-the-Family-Wake-Up-Married-2-by-Leta-Blake.pdf
    • http://cefasfese.4pu.com/4738733737734732/Coming-Home-The-Santa-Monica-Trilogy-2-by-Jill-Blake.pdf
    • http://cefasfese.4pu.com/8734734739732/Training-Season-Training-Season-1-by-Leta-Blake.pdf
    • http://cefasfese.4pu.com/7733734737738/Training-Season-Training-Season-1-by-Leta-Blake.pdf
    • http://cefasfese.4pu.com/7731737730735/For-Colored-Boys-Who-Have-Considered-Suicide-When-the-Rainbow-is-Still-Not-Enough-Coming-of-Age-Coming-Out-and-Coming-Home-by-Keith-Boykin.pdf
    • http://cefasfese.4pu.com/3737735739738732/Coming-Together-Coming-Apart-A-Memoir-of-Heartbreak-and-Promise-in-Israel-by-Daniel-Gordis.pdf
    • http://cefasfese.4pu.com/1730732738737731739/The-Divine-Comedy-William-Blake-William-Blake-Die-G-ttliche-Kom-die-La-Divine-Com-die-William-Blake-by-David-Bindman.pdf
    • http://cefasfese.4pu.com/1735733731734733/My-Red-Blood-A-Memoir-of-Growing-Up-Communist-Coming-Onto-the-Greenwich-Village-Folk-Scene-and-Coming-Out-in-the-Feminist-Movement-by-Alix-Dobkin.pdf
    • http://cefasfese.4pu.com/3738731731735734/The-High-Lord-by-Leta-Hutchins.pdf
    • http://cefasfese.4pu.com/1737736738739736/For-the-Love-of-Big-Orange-Bluegrass-Country-1-by-Leta-Gail-Doerr.pdf
    • http://cefasfese.4pu.com/8735732736734732/For-the-Love-of-Justice-Bluegrass-Country-3-by-Leta-Gail-Doerr.pdf
    • http://cefasfese.4pu.com/2739734739736732/Betraying-Big-Brother-The-Feminist-Awakening-in-China-by-Leta-Hong-Fincher.pdf
    • http://cefasfese.4pu.com/1731734730737734738/Santa-Claus-is-coming---A-gay-erotic-fantasy-Adults-get-excited-when-Santa-is-coming-too-by-Kudos-Krank.pdf
    • http://cefasfese.4pu.com/2737737733731732/Blake-s-7-Blake-s-7-by-Trevor-Hoyle.pdf
    • http://cefasfese.4pu.com/4738731731738733/Quentin-Blake-s-Ten-Frogs-A-First-Book-About-Numbers-by-Quentin-Blake.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.