Malicious PDF — malware analysis report

Static analysis result for SHA-256 6492cddfae18dad2…

MALICIOUS

PDF

21.2 KB Created: 2019-05-01 17:18:11 +01:00 Authoring application: mPDF 5.7 First seen: 2021-06-04
MD5: 7b17e53369875402f0e292164cd9c9a6 SHA-1: 6481b53d147fafdc2262cf2f51b24bde9186d8e5 SHA-256: 6492cddfae18dad282fc6122abbb97789e9aeeb282aed9c21b9a85333bddb310
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded URLs pointing to external PDF files hosted on the suspicious domain 'kiteeearpdf.myhome.cx'. This behavior is indicative of a link farm or a lure to download further malicious content. The ML classifier also flagged this PDF as malicious, supporting the assessment of a malicious intent.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9900

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://kiteeearpdf.myhome.cx/1f211f217f211f211f214f218/The-Turbulent-Years-A-History-of-the-American-Worker-1933-1941-by-Irving-Bernstein.pdf In PDF document text
    • http://kiteeearpdf.myhome.cx/1f211f217f211f211f214f214/Stay-Me-Oh-Comfort-Me-Journals-and-Stories-1933-1941-by-M-F-K-Fisher.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/4f218f216f218f216f218/No-Justice-in-Germany-The-Breslau-Diaries-1933-1941-by-Willy-Cohn.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/1f213f216f214f210f210/None-Is-Too-Many-Canada-and-the-Jews-of-Europe-1933-1948-by-Irving-Abella.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/1f210f214f213f213f218f214/Der-Fiskus-ALS-Verfolger-Die-Steuerliche-Diskriminierung-Der-Juden-in-Bayern-1933-1941-42-by-Axel-Drecoll.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/8f210f211f211f217f210/Marching-as-to-War-Canada-s-Turbulent-Years-by-Pierre-Berton.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/8f219f210f218f217f218/Sinn-F-in-A-Hundred-Turbulent-Years-by-Brian-Feeney.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/4f219f210f216f213/House-on-the-Bridge-Ten-Turbulent-Years-with-Diego-Rivera-by-Sharon-Upp.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/4f218f214f218f217/They-Tried-to-Cut-It-All-Grays-Harbor--Turbulent-Years-of-Greed-and-Greatness-by-Edwin-Theodore-Van-Syckle.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/3f210f214f217f217f216/Unsolved-Mysteries-of-American-History-An-Eye-Opening-Journey-through-500-Years-of-Discoveries-Disappearances-and-Baffling-Events-by-Paul-Aron.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/4f210f210f212f212f219/Navigating-the-Turbulent-Middle-School-Years-Common-Sense-Solutions-for-Problems-and-Behaviors-by-Dr-Kid-Brain.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/1f211f217f211f211f213f214/The-New-Deal-The-Depression-Years-1933-40-by-Anthony-J-Badger.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/8f210f218f217f219f215/Robert-Capa-The-Paris-Years-1933-54-by-Bernard-Lebrun.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/1f211f216f215f210f214f212/George-Grosz-The-Years-in-America-1933-1958-by-Juerg-M-Judin.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/1f210f214f218f217f210/Eleanor-Roosevelt-Vol-2-The-Defining-Years-1933-38-by-Blanche-Wiesen-Cook.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/1f218f217f217f216f213/Advice-and-Support-The-Early-Years-1941-1960-by-Ronald-H-Spector.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/1f211f215f211f212f211/Nazi-Germany-and-the-Jews-The-Years-of-Persecution-1933-1939-by-Saul-Friedl-nder.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/1f217f213f214f214f214/Eleanor-Roosevelt-Volume-2-The-Defining-Years-1933-1938-by-Blanche-Wiesen-Cook.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/3f219f211f219f217f210/With-Love-from-Diana-the-Princess-of-Wales-Personal-Astrologer-Shares-Her-First-Hand-Account-of-Diana-s-Turbulent-Years-by-Penny-Thornton.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/1f210f219f217f217f211f210/Famous-Father-Girl-A-Memoir-of-Growing-Up-Bernstein-by-Jamie-Bernstein.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.