Malicious PDF — malware analysis report

Static analysis result for SHA-256 6e3fc8c1c946a41b…

MALICIOUS

PDF

14.6 KB Created: 2019-11-07 21:02:33 +00:00 Authoring application: mPDF 5.7
MD5: 5ce7ad94fdf56a856e6f1e7d292ae46e SHA-1: b2fce32df51172788636d74372dcf83733d4eb62 SHA-256: 6e3fc8c1c946a41b26254aeb1aafe4f9964bfd14cfd5407e74033aa3b200c8c0
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded URLs pointing to external PDF files hosted on the domain 'cefasfese.4pu.com'. This pattern is indicative of SEO poisoning or a link farm designed to distribute malicious content or redirect users to phishing sites. While no scripts were explicitly extracted, the PDF structure and the heuristic 'PDF_SEO_LINK_FARM' strongly suggest an attempt to manipulate search engine results or lure users to potentially harmful content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9798

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/1731738736731733732/Kaplan-PRAXIS-by-Kaplan-Inc-.pdf
    • http://cefasfese.4pu.com/5739739732731739/Correspondance-Nelly-Kaplan-Andr-Pieyre-de-Mandiargues-cris-moi-tes-hauts-faits-et-tes-crimes-by-Nelly-Kaplan.pdf
    • http://cefasfese.4pu.com/9735738737738739/Der-Verr-ter-by-Simone-Kaplan.pdf
    • http://cefasfese.4pu.com/1730735736733730738/The-Devil-s-Jury-by-D-S-Kaplan.pdf
    • http://cefasfese.4pu.com/2738734736730/The-Education-of-Hyman-Kaplan-by-Leo-Rosten.pdf
    • http://cefasfese.4pu.com/3735730731730732/Why-I-m-Like-This-True-Stories-by-Cynthia-Kaplan.pdf
    • http://cefasfese.4pu.com/6734736734732736/Port-of-Earth-Vol-1-by-Zack-Kaplan.pdf
    • http://cefasfese.4pu.com/2734730731738730/Why-I-m-Like-This-True-Stories-by-Cynthia-Kaplan.pdf
    • http://cefasfese.4pu.com/1739735736731733/The-Accidental-Bad-Girl-by-Maxine-Kaplan.pdf
    • http://cefasfese.4pu.com/3737733730731732/We-Regret-to-Inform-You-by-Ariel-Kaplan.pdf
    • http://cefasfese.4pu.com/4733735732735734/Pearl-s-Progress-by-James-Kaplan.pdf
    • http://cefasfese.4pu.com/1736733732736733/Ex-Wives-of-Dracula-by-Georgette-Kaplan.pdf
    • http://cefasfese.4pu.com/2733734738737738/Scissor-Link-by-Georgette-Kaplan.pdf
    • http://cefasfese.4pu.com/1739730730739738/The-Edge-of-Marriage-by-Hester-Kaplan.pdf
    • http://cefasfese.4pu.com/8736737730736738/Liebe-aus-dem-Dschungel-by-Simone-Kaplan.pdf
    • http://cefasfese.4pu.com/1732735736735732/Patient-Crew-by-Hannah-Kaplan.pdf
    • http://cefasfese.4pu.com/2731738734731/Female-Perversions-by-Louise-J-Kaplan.pdf
    • http://cefasfese.4pu.com/2731739739731/Thomas-Carlyle-A-Biography-by-Fred-Kaplan.pdf
    • http://cefasfese.4pu.com/4732736734733731/In-the-Neighborhood-of-True-by-Susan-Kaplan-Carlton.pdf
    • http://cefasfese.4pu.com/2736730737736730/Dim-Sum-Dead-Some-Josie-Tucker-Mystery-2-by-E-M-Kaplan.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.