Malicious PDF — malware analysis report

Static analysis result for SHA-256 657bf9dad3d7e637…

MALICIOUS

PDF

24.6 KB Created: 2019-05-02 05:42:15 +01:00 Authoring application: mPDF 5.7
MD5: 1505f9ca09be4ab85411ab31c05b8514 SHA-1: b4d55bb6a8738b18dc0b94f10887ff846f547f4c SHA-256: 657bf9dad3d7e6379264da0cc4181157ae9d6ffffb5744400ea7ec8da4ec3f90
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified as a link farm. The ML classifier also flagged this PDF as malicious. The primary attack pattern involves directing users to a collection of external PDF documents, likely for SEO manipulation or to host malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9716

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/4732732730738737/The-Lean-Strategy-Using-Lean-to-Create-Competitive-Advantage-Unleash-Innovation-and-Deliver-Sustainable-Growth-by-Michael-Ball-.pdf
    • http://cefasfese.4pu.com/9739732735734/2-Second-Lean-How-to-Grow-People-and-Build-a-Fun-Lean-Culture-by-Paul-A-Akers.pdf
    • http://cefasfese.4pu.com/5738731736734732/Leveraging-Knowledge-Based-Assets-The-New-Value-Equation-to-Create-Competitive-Advantage-by-Marius-Ungerer.pdf
    • http://cefasfese.4pu.com/7734738731732739/The-Lean-Manager-A-Novel-of-Lean-Transformation-by-Freddy-Ball-.pdf
    • http://cefasfese.4pu.com/6739733733730738/Practical-Lean-Six-Sigma-for-Healthcare-with-Links-to-over-30-Excel-Worksheets-Using-the-A3-and-Lean-Thinking-to-Improve-Operational-Performance-in-Clinics-and-Physician-Group-Practices-by-Todd-Sperl.pdf
    • http://cefasfese.4pu.com/6739733734737738/The-A3-Pocket-Handbook-for-Kaizen-Events---Providing-Any-Industry-Any-Time-With-A-Lean-Reporting-Format-and-Lean-Thinking-Version-2-Now-Includes-Links-to-the-A3-Report-and-Other-Worksheets-by-Todd-Sperl.pdf
    • http://cefasfese.4pu.com/5737731735735735/The-Lean-Startup-How-Constant-Innovation-Creates-Radically-Successful-Businesses-by-Eric-Ries.pdf
    • http://cefasfese.4pu.com/7734738731732735/The-Lean-Manager-by-Michael-Ball-.pdf
    • http://cefasfese.4pu.com/2735731737734733/Competitive-Strategy-Techniques-for-Analyzing-Industries-and-Competitors-by-Michael-E-Porter.pdf
    • http://cefasfese.4pu.com/6733733734734739/Leadership-for-Competitive-Advantage-by-Nick-Georgiades.pdf
    • http://cefasfese.4pu.com/3738730732735737/Hero-by-Sarah-Lean.pdf
    • http://cefasfese.4pu.com/4733734731738732/Lean-On-Me-by-Tori-Scott.pdf
    • http://cefasfese.4pu.com/5732731739737736/Lean-Out-by-Dawn-Foster.pdf
    • http://cefasfese.4pu.com/9734737737738737/Business-Modeling-for-Life-Science-and-Biotech-Companies-Creating-Value-and-Competitive-Advantage-with-the-Milestone-Bridge-by-Alberto-Onetti.pdf
    • http://cefasfese.4pu.com/4736737732731738/A-Horse-for-Angel-by-Sarah-Lean.pdf
    • http://cefasfese.4pu.com/4736733730736736/Lean-Lisa-by-Jacob-Grimm.pdf
    • http://cefasfese.4pu.com/6730733730732730/UX-for-Lean-Startups-by-Laura-Klein.pdf
    • http://cefasfese.4pu.com/4737734738736734/Lean-on-Me-Take-My-Hand-3-by-Nicola-Haken.pdf
    • http://cefasfese.4pu.com/1730738735734730/Lean-On-Me-Loveswept-912-by-Jill-Shalvis.pdf
    • http://cefasfese.4pu.com/3739736730730736/Lean-on-Me-by-Claudia-Hall-Christian.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.