Malicious PDF — malware analysis report

Static analysis result for SHA-256 6eceae20f9369ccc…

MALICIOUS

PDF

16.5 KB Created: 2019-04-30 03:11:34 +01:00 Authoring application: mPDF 5.7 First seen: 2021-10-16
MD5: 17b670ecba7ed2401549527612fef969 SHA-1: ef64a6f9948727fb8108a49da2cb3a4b2574a397 SHA-256: 6eceae20f9369ccc4d599bc7afe4e214d639e54859ba58b7242a9a25dfd680ba
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, which are likely intended to direct users to malicious websites. The ML_NYX_PDF_MALICIOUS heuristic also flagged the document as malicious. The embedded URLs, while appearing to link to book titles, are part of a link farm designed to potentially lead users to malicious content or phishing pages.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9811

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a00a00a09a03a07a09/The-AIDS-Bureaucracy-Why-Society-Failed-to-Meet-the-AIDS-Crisis-and-How-We-Might-Improve-Our-Response-by-Sandra-Panem.pdf In PDF document text
    • http://muicuiu.dumb1.com/1a01a09a02a09a09a05/AIDS-and-Power-Why-there-is-no-political-crisis---yet-by-Alex-de-Waal.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a09a02a07a06/The-Way-We-Live-Now-American-Plays-and-the-AIDS-Crisis-by-Elizabeth-Osborn.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a01a04a05a00a05a02/AIDS-Science-and-Society-by-Hung-Y-Fan.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a00a00a09a04a04a00/The-Interferon-Crusade-by-Sandra-Panem.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a09a07a06a03a05/Witness-to-AIDS-by-Edwin-Cameron.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a01a04a04a09a04a06/AIDS-at-30-A-History-by-Victoria-A-Harden.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a01a04a05a00a05a05/My-Brother-Has-AIDS-by-Deborah-Davis.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a00a00a09a04a03a04/Biotechnology-Implications-For-Public-Policy-by-Sandra-Panem.pdfIn PDF document text
    • http://muicuiu.dumb1.com/4a09a09a07a03a07/HIV-and-AIDS-in-Africa-Beyond-Epidemiology-by-Ezekiel-Kalipeni.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a02a03a08a01/Nevirapine-and-the-Quest-to-End-Pediatric-AIDS-by-Rebecca-J-Anderson.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a01a04a04a09a00a00/Saccharin-And-Plastic-Band-Aids-by-Branch-Isole.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a09a08a00a01/T-Cells-amp-Sympathy-Monologues-in-the-Age-of-AIDS-by-Michael-Kearns.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a07a05a09a04a00/Illness-as-Metaphor-and-AIDS-and-Its-Metaphors-by-Susan-Sontag.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a01a01a08a02a00a07/Talitha-Cumi-Healed-of-AIDS-by-Tendani-Mathe.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a03a07a03a01a08/AIDS-and-Accusation-Haiti-and-the-Geography-of-Blame-by-Paul-Farmer.pdfIn PDF document text
    • http://muicuiu.dumb1.com/8a02a04a05a04a08/Mental-Health-Practitioner-s-Guide-to-Hiv-AIDS-by-Sana-Loue.pdfIn PDF document text
    • http://muicuiu.dumb1.com/9a08a03a03a08/Stagestruck-Theater-AIDS-and-the-Marketing-of-Gay-America-by-Sarah-Schulman.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a01a04a04a08a09a01/Lexical-Aids-for-Students-of-New-Testament-Greek-by-Bruce-M-Metzger.pdfIn PDF document text
    • http://muicuiu.dumb1.com/3a04a05a04a07/Life-Sentences-Writers-Artists-and-AIDS-by-Thomas-Avena.pdfIn PDF document text