Malicious PDF — malware analysis report

Static analysis result for SHA-256 65152dc85c603f61…

MALICIOUS

PDF

21.3 KB Created: 2020-02-15 15:39:32 +00:00 Authoring application: mPDF 5.7
MD5: 459c8eb4a08ba2339289d7cf8ffca448 SHA-1: 71fcbba4d9c797c8f9f5803370a0cc09d7ba1b8b SHA-256: 65152dc85c603f6133e291dac58fd2876fd71115045a8f42ac587c9826f5f3ef
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to external PDF documents, a technique often used for SEO poisoning or to distribute malicious content. The ML classifier also flagged this PDF as malicious. The primary attack pattern involves directing users to a suspicious domain hosting numerous documents, likely as a lure or to distribute further malware.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://kitasdyu.myhome.cx/1875874872875874/The-Power-Elite-by-C-Wright-Mills.pdf
    • http://kitasdyu.myhome.cx/2877874874870878/Superclass-The-Global-Power-Elite-and-the-World-They-Are-Making-by-David-Rothkopf.pdf
    • http://kitasdyu.myhome.cx/5876879874872872/The-State-Nobility-Elite-Schools-in-the-Field-of-Power-by-Pierre-Bourdieu.pdf
    • http://kitasdyu.myhome.cx/7870877879876/Summary-of-The-48-Laws-of-Power-by-Robert-Greene-Includes-Analysis-by-Elite-Summaries.pdf
    • http://kitasdyu.myhome.cx/2873874874879877/Power-by-Kenya-Wright.pdf
    • http://kitasdyu.myhome.cx/4875870879873871/Creation-Power-and-Truth-The-Gospel-in-a-World-of-Cultural-Confusion-by-Tom-Wright.pdf
    • http://kitasdyu.myhome.cx/5870876874879876/The-Loneliness-of-the-Black-Republican-Pragmatic-Politics-and-the-Pursuit-of-Power-by-Leah-Wright-Rigueur.pdf
    • http://kitasdyu.myhome.cx/3879877877879870/Elite-Eagle-Elite-1-by-Rachel-Van-Dyken.pdf
    • http://kitasdyu.myhome.cx/1871872873871879879/ELITE-FORCES-GREEN-BERETS-Villard-Military-Series-Elite-Forces-by-Orbis-Publishing-Limited.pdf
    • http://kitasdyu.myhome.cx/8875871873875870/The-Mills-amp-Boon-Modern-Girl-s-Guide-to-Growing-Old-Disgracefully-Mills-amp-Boon-A-Zs-Book-6-by-Ada-Adverse.pdf
    • http://kitasdyu.myhome.cx/8875871873874877/The-Mills-amp-Boon-Modern-Girl-s-Guide-to-Turning-into-Your-Mother-The-Perfect-Mother-s-Day-gift-for-mums-who-have-it-all-Mills-amp-Boon-A-Zs-Book-5-by-Ada-Adverse.pdf
    • http://kitasdyu.myhome.cx/1871873878876877872/Russel-Wright-s-Menu-Cookbook-A-Guide-to-Easier-Entertaining-by-Ann-Wright.pdf
    • http://kitasdyu.myhome.cx/1878874877876870/Casual-Power-How-to-Power-Up-Your-Nonverbal-Communication-amp-Dress-Down-for-Success-by-Sherry-Maysonave.pdf
    • http://kitasdyu.myhome.cx/8871878877873/Last-Sword-of-Power-Stones-of-Power-2-by-David-Gemmell.pdf
    • http://kitasdyu.myhome.cx/7875876874875875/Analog-Circuit-Design-Sensors-Actuators-and-Power-Drivers-Integrated-Power-Amplifiers-from-Wireline-to-Rf-Very-High-Frequency-Front-Ends-by-Herman-Casier.pdf
    • http://kitasdyu.myhome.cx/3871872874879/The-Elite-by-Kiera-Cass.pdf
    • http://kitasdyu.myhome.cx/4870870879871874/The-Elite-The-Selection-2-by-Kiera-Cass.pdf
    • http://kitasdyu.myhome.cx/4878876873873876/Coastal-Elite-by-Kate-Canterbary.pdf
    • http://kitasdyu.myhome.cx/1876875872876878/Maverick-Elite-Ops-2-by-Lora-Leigh.pdf
    • http://kitasdyu.myhome.cx/3875876876870874/One-Last-Thing-Elite-Operatives-7-by-Kim-Baldwin.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.