Malicious PDF — malware analysis report

Static analysis result for SHA-256 61d66d9f9fc05bb7…

MALICIOUS

PDF

17.4 KB Created: 2019-05-03 05:10:45 +01:00 Authoring application: mPDF 5.7 First seen: 2021-04-01
MD5: 92f5f09ff310a68839a590afcc126781 SHA-1: cf362dfa3d060c01529144ff6373814b0f14d31b SHA-256: 61d66d9f9fc05bb7bdc2886592d03e7d41536a65d29f48de65b6c2abf9068a03
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/8732730734734/Mimesis-The-Representation-of-Reality-in-Western-Literature-by-Erich-Auerbach.pdf In PDF document text
    • http://cefasfese.4pu.com/1733738732731733/Representation-and-Reality-by-Hilary-Putnam.pdfIn PDF document text
    • http://cefasfese.4pu.com/1735739730734733/All-Quiet-on-the-Western-Front-by-Erich-Maria-Remarque.pdfIn PDF document text
    • http://cefasfese.4pu.com/6735732732735738/All-Quiet-on-the-Western-Front-by-Erich-Maria-Remarque.pdfIn PDF document text
    • http://cefasfese.4pu.com/9737739737733734/All-Quiet-on-the-Western-Front-Job-by-Erich-Maria-Remarque.pdfIn PDF document text
    • http://cefasfese.4pu.com/3738739730736732/All-Quiet-on-the-Western-Front-by-Erich-Maria-Remarque.pdfIn PDF document text
    • http://cefasfese.4pu.com/5735730730734735/All-Quiet-on-the-Western-Front-by-Erich-Maria-Remarque.pdfIn PDF document text
    • http://cefasfese.4pu.com/3732732732738/All-Quiet-on-the-Western-Front-by-Erich-Maria-Remarque.pdfIn PDF document text
    • http://cefasfese.4pu.com/5734731736736733/All-Quiet-on-the-Western-Front-by-Erich-Maria-Remarque.pdfIn PDF document text
    • http://cefasfese.4pu.com/2733732734737730/All-Quiet-on-the-Western-Front-by-Erich-Maria-Remarque.pdfIn PDF document text
    • http://cefasfese.4pu.com/8739734731730739/All-Quiet-on-the-Western-Front-Classics-Illustrated-95-by-Erich-Maria-Remarque.pdfIn PDF document text
    • http://cefasfese.4pu.com/9736735737734733/War-in-Erich-Maria-Remarque-s-All-Quiet-on-the-Western-Front-by-Noah-Berlatsky.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731738737732736732/All-Quiet-on-the-Western-Front-Independent-Banned-Books-series-9-by-Erich-Maria-Remarque.pdfIn PDF document text
    • http://cefasfese.4pu.com/4731737730737730/The-Demon-of-Noontide-Ennui-in-Western-Literature-by-R-Kuhn.pdfIn PDF document text
    • http://cefasfese.4pu.com/7738739733731736/The-Demon-of-Noontide-Ennui-in-Western-Literature-by-R-Kuhn.pdfIn PDF document text
    • http://cefasfese.4pu.com/4735734732730738/Keeper-of-the-Protocols-The-Works-of-Jens-Bj-rneboe-in-the-Crosscurrents-of-Western-Literature-by-Joe-Martin.pdfIn PDF document text
    • http://cefasfese.4pu.com/9734736737737736/Berthold-Auerbach-The-Complete-Collection-by-Berthold-Auerbach.pdfIn PDF document text
    • http://cefasfese.4pu.com/5731736739731739/Mimesis-and-Empire-The-New-World-Islam-and-European-Identities-by-Barbara-Fuchs.pdfIn PDF document text
    • http://cefasfese.4pu.com/7730733732737737/Dawn-of-the-New-Everything-Encounters-with-Reality-and-Virtual-Reality-by-Jaron-Lanier.pdfIn PDF document text
    • http://cefasfese.4pu.com/4732731730738737/A-Century-of-Great-Western-Stories-An-Anthology-of-Western-Fiction-by-John-Jakes.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.