Malicious PDF — malware analysis report

Static analysis result for SHA-256 6dee13f5b740dfa1…

MALICIOUS

PDF

15.9 KB Created: 2019-11-10 00:19:29 +00:00 Authoring application: mPDF 5.7
MD5: 7b73f30bf98bf2b8c707e93941b62867 SHA-1: d5b7d56f5cb2e7e2605f71d3daad9e8b377aa1ff SHA-256: 6dee13f5b740dfa1a411a7c5286a679da66f560db650b05f161f542dd99096e8
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded links, identified as a link farm, directing users to external PDF files. This behavior is indicative of SEO poisoning or a similar tactic to drive traffic to specific content. The ML classifier also flagged the document as malicious, supporting this assessment.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9800

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/6730739730734730/Bonsai-Tree-Care-Bailout-A-Beginner-s-Bonsai-Guide-by-Joshua-Rothman.pdf
    • http://cefasfese.4pu.com/6730738738739730/The-Bonsai-Bible-The-definitive-guide-to-choosing-and-growing-bonsai-by-Peter-Chan.pdf
    • http://cefasfese.4pu.com/6730739730733731/The-Bonsai-Specialist-The-Essential-Guide-to-Buying-Planting-Displaying-Improving-and-Caring-for-Bonsai-by-David-Squire.pdf
    • http://cefasfese.4pu.com/8738739734732/In-Ghostly-Japan-Spooky-Stories-with-the-Folklore-Superstitions-and-Traditions-of-Old-Japan-by-Lafcadio-Hearn.pdf
    • http://cefasfese.4pu.com/8730732739734737/Festivals-of-Japan-by-Japan-Travel-Bureau.pdf
    • http://cefasfese.4pu.com/2739738731733735/The-Test-of-Time-What-Makes-A-Classic-A-Classic-by-Andrew-Holgate.pdf
    • http://cefasfese.4pu.com/1731735738730736/Seventeen-by-Hideo-Yokoyama.pdf
    • http://cefasfese.4pu.com/8730733736739736/An-American-Breakfast-by-Hideo-Asano.pdf
    • http://cefasfese.4pu.com/9737739735732730/Ichi-the-killer-vol-9-by-Hideo-Yamamoto.pdf
    • http://cefasfese.4pu.com/9737739736734738/-Wagaya-no-mondai-by-Hideo-Okuda.pdf
    • http://cefasfese.4pu.com/6737735739731730/-Rupan-No-Sho-soku-by-Hideo-Yokoyama.pdf
    • http://cefasfese.4pu.com/6737736730734736/-Kage-no-kisetsu-by-Hideo-Yokoyama.pdf
    • http://cefasfese.4pu.com/9737739735737730/Encyclopedia-of-Japanese-Cuisine-by-Hideo-Dekura.pdf
    • http://cefasfese.4pu.com/9737739736735732/Essentially-Japanese-cooking-amp-cuisine-by-Hideo-Dekura.pdf
    • http://cefasfese.4pu.com/6730738739738732/Bonsai-by-Jon-Ardle.pdf
    • http://cefasfese.4pu.com/3737730738738730/Bonsai-by-Alejandro-Zambra.pdf
    • http://cefasfese.4pu.com/6730739730732738/The-Essentials-Of-Bonsai-by-Shufunotomo.pdf
    • http://cefasfese.4pu.com/6730738738738730/Bonsai-by-Susan-Lang.pdf
    • http://cefasfese.4pu.com/6730738738737739/The-Bonsai-Handbook-by-David-Prescott.pdf
    • http://cefasfese.4pu.com/6730739730732732/Bonsai-in-Australia-by-Dorothy-Koreshoff.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.