Malicious PDF — malware analysis report

Static analysis result for SHA-256 6b1e00ab60676675…

MALICIOUS

PDF

15.3 KB Created: 2019-04-30 04:28:38 +01:00 Authoring application: mPDF 5.7
MD5: fa45d0be16fbbbf83c43c3a9cebf985a SHA-1: 6711e3af61e7ce5c38aff326c56f793452f8bb31 SHA-256: 6b1e00ab60676675755ec09f379327b18bda23ae7bcf599cbf4db9e32bbcd1f0
100 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified as a link farm. While the document body is heavily obfuscated, the presence of numerous links to external PDF files suggests a tactic to manipulate search engine results or distribute content through a link farm. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9778

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/4a04a06a04a06a00/Demon-Games-A-Demon-Hunter-Novel-Book-4-by-L-A-Kennedy.pdf
    • http://muicuiu.dumb1.com/4a03a03a09a02a07/Macabre-A-Demon-Hunter-Novel-Book-1-by-L-A-Kennedy.pdf
    • http://muicuiu.dumb1.com/4a06a08a07a08a01/The-Demon-of-Dhaka-The-Demon-Series-Book-3-by-Ayse-Hafiza.pdf
    • http://muicuiu.dumb1.com/3a07a02a03a02a09/Ava-s-Demon-Book-One-Ava-s-Demon-1-by-Michelle-Czajkowski.pdf
    • http://muicuiu.dumb1.com/9a05a02a06a03/The-Demon-Trapper-s-Daughter-The-Demon-Trappers-1-by-Jana-Oliver.pdf
    • http://muicuiu.dumb1.com/2a05a01a08a03a01/The-Demon-Trapper-s-Daughter-The-Demon-Trappers-1-by-Jana-Oliver.pdf
    • http://muicuiu.dumb1.com/1a03a03a03a08a06/Demon-Revealed-High-Demon-2-by-Connie-Suttle.pdf
    • http://muicuiu.dumb1.com/2a00a07a07a09a07/Demon-s-Caress-Demon-Heat-1-by-Crystal-Jordan.pdf
    • http://muicuiu.dumb1.com/1a03a03a06a01a00/Demon-s-Quest-High-Demon-4-by-Connie-Suttle.pdf
    • http://muicuiu.dumb1.com/4a04a00a00a01a09/Confessions-of-a-Sex-Demon-The-Sex-Demon-Trilogy-1-by-Jaye-Shields.pdf
    • http://muicuiu.dumb1.com/1a05a06a09a03a09/The-Demon-Re-Born-The-Repentant-Demon-2-by-Samantha-Johns.pdf
    • http://muicuiu.dumb1.com/2a08a08a00a09/Demon-Lost-High-Demon-1-by-Connie-Suttle.pdf
    • http://muicuiu.dumb1.com/4a02a05a07a05a07/The-Demon-You-Know-Demon-Hunting-Soccer-Mom-4-5-by-Julie-Kenner.pdf
    • http://muicuiu.dumb1.com/3a09a05a04a05a03/My-Demon-s-Destiny-My-Demon-Trilogy-3-by-Alicia-Dawn.pdf
    • http://muicuiu.dumb1.com/1a03a03a07a02a07/Demon-s-Dream-High-Demon-6-by-Connie-Suttle.pdf
    • http://muicuiu.dumb1.com/2a09a07a01a08a03/The-Demon-Hunter-The-Hunter-2-by-Lori-Brighton.pdf
    • http://muicuiu.dumb1.com/7a07a07a01a09a03/Demon-s-Kiss-Demon-Allure-1-by-V-J-Devereaux.pdf
    • http://muicuiu.dumb1.com/1a04a06a04a04a00/Between-the-Bleeding-Willows-Demon-Hunter-1-by-D-A-Roach.pdf
    • http://muicuiu.dumb1.com/1a08a05a06a02a03/Demon-Deathchase-Vampire-Hunter-D-3-by-Hideyuki-Kikuchi.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a04a07a02/Yamada-Monogatari-Demon-Hunter-by-Richard-Parks.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.