Malicious PDF — malware analysis report

Static analysis result for SHA-256 6242698dd2a8a98d…

MALICIOUS

PDF

16.9 KB Created: 2019-11-09 23:49:50 +00:00 Authoring application: mPDF 5.7
MD5: ef1a3fa65f715faf546d549d0b09356b SHA-1: 9cd147ddee6e71a416f3aec850c113860176af62 SHA-256: 6242698dd2a8a98dd41ffbe9abdce859ee909a35f70ea281b40f32c6d38367b0
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

This PDF file contains a large number of embedded URLs, forming a link farm. The ML classifier also flagged this PDF as malicious. The URLs themselves appear to point to book titles, suggesting a potential lure or SEO manipulation tactic. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9788

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/9736732736730739/Alpha-s-War-Bad-Boy-Alphas-7-Bad-Alpha-Dads-by-Renee-Rose.pdf
    • http://cefasfese.4pu.com/9736732736731730/Alpha-s-Prize-Bad-Boy-Alphas-3-by-Renee-Rose.pdf
    • http://cefasfese.4pu.com/1738734736732739/The-Alpha-Series-Boxed-Set-Books-1---3-Alpha-Kaden-Alpha-Grayson-and-Alpha-Jasper-by-Midika-Crane.pdf
    • http://cefasfese.4pu.com/2737738734731739/The-Loneliest-Alpha-The-MacKellen-Alphas-1-by-T-A-Grey.pdf
    • http://cefasfese.4pu.com/4735734733730730/Vampire-Alpha-Claim-1-Vampire-Alpha-Claim-1-by-Tamara-Rose-Blodgett.pdf
    • http://cefasfese.4pu.com/2737731736730734/Alpha-Bully-The-Alpha-Shifter-Collection-5-by-Sam-Crescent.pdf
    • http://cefasfese.4pu.com/1732738730730731/Alpha-Divided-Alpha-Girl-3-by-Aileen-Erin.pdf
    • http://cefasfese.4pu.com/3732735738732732/The-Alpha-s-Toy-The-Alpha-Shifter-Collection-1-by-Sam-Crescent.pdf
    • http://cefasfese.4pu.com/7735739736730733/Alpha-Initiation-Alpha-Blood-1-by-Mac-Flynn.pdf
    • http://cefasfese.4pu.com/4731732732735733/Becoming-Alpha-Alpha-Girl-1-by-Aileen-Erin.pdf
    • http://cefasfese.4pu.com/2739739736738739/Posing-for-the-Alpha-For-the-Alpha-1-by-Sydnee-B-.pdf
    • http://cefasfese.4pu.com/2735735731730735/Alpha-Alpha-1-by-Jasinda-Wilder.pdf
    • http://cefasfese.4pu.com/1731731738735739739/Awesomely-Alpha-9-Story-Big-Bundle-of-Interracial-Group-Domination-and-Macho-Hetero-Erotica-Alpha-Male-Hetero-Big-Bundles-Book-2-by-JT-Washington.pdf
    • http://cefasfese.4pu.com/3736735736731738/Alpha-amp-Omega-Call-of-the-Hunt-Alpha-amp-Omega-0-5-3-by-Patricia-Briggs.pdf
    • http://cefasfese.4pu.com/2739734731737736/A-is-for-Alpha-Male-A-is-for-Alpha-Male-1-by-Laurel-Ulen-Curtis.pdf
    • http://cefasfese.4pu.com/1737737736737738/Punished-by-the-Alpha-Poutine-Alpha-Poutine-2-by-Twisty-McCox.pdf
    • http://cefasfese.4pu.com/4738737739737731/True-Alpha-Complete-Box-Set-True-Alpha-1-6-by-Alisa-Woods.pdf
    • http://cefasfese.4pu.com/1732733731733737/Alpha-Goddess-Alpha-Goddess-1-by-Amalie-Howard.pdf
    • http://cefasfese.4pu.com/4736730732733737/Alpha-Fighter---Part-Two-The-Alpha-Fighter-2-by-Ava-Ashley.pdf
    • http://cefasfese.4pu.com/1737737736737739/Alpha-Billionaire-Alpha-Billionaire-1-by-Helen-Cooper.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.