Malicious PDF — malware analysis report

Static analysis result for SHA-256 6fd19cb36fd9f91c…

MALICIOUS

PDF

18.4 KB Created: 2020-03-15 22:49:37 +00:00 Authoring application: mPDF 5.7 First seen: 2021-04-10
MD5: 1099e34dd3b46faebcaeb453a9db41f1 SHA-1: 569a436f79f6ea0ed281d1f945058393c8c27dcb SHA-256: 6fd19cb36fd9f91c1f41a1cea96c378f48d1b2ce1dfa825d9f4246208afd1a6b
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9912

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://owlaokopdf.myhome.cx/3816081678166/Private-Paris-Private-10-by-James-Patterson.pdf In PDF document text
    • http://owlaokopdf.myhome.cx/68168/Private-Vegas-Private-9-by-James-Patterson.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/781658169816581698165/Private-Gold-Private-13-5-by-James-Patterson.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/881618165816481678165/Private-Private-1-by-James-Patterson.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/1816081678169816481698166/Private-Oz-Private-7-by-James-Patterson.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/48163816281668165/Private-Private-1-by-James-Patterson.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/1816081618162816381668166/Your-Private-Life-is-Private-How-to-STOP-people-from-snooping-around-by-using-Proxies-TOR-VPNs-the-Darknet-amp-Hackerproof-Data-Encryption-by-Sheldon-Kuthrawitz.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/981698162816381618160/Private-Passions-Private-4-by-Jami-Alden.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/381638161816881628167/Private-Private-Book-1-by-Xavier-Neal.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/38167816081698167/Private-Private-1-by-Kate-Brian.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/281668161816681678168/Private-Private-1-by-Kate-Brian.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/481688162816681688163/Private-Private-1-by-Kate-Brian.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/181628169816381648168/The-Complete-Private-Collection-Private-Invitation-Only-Untouchable-Confessions-Inner-Circle-Legacy-Ambition-Revelation-Last-Christmas-Paradise-Lost-Suspicion-Scandal-Vanished-The-Book-of-Spells-Ominous-Vengeance-by-Kate-Brian.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/381608168816381688160/Private-Love-in-a-Public-Place-Private-Love-1-by-Toni-Kenyon.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/381698161816681678168/The-Private-Memoirs-and-Confessions-of-a-Justified-Sinner-by-James-Hogg.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/381668161816781638164/A-Cruise-to-Die-For-A-Redmond-James-Private-Detective-Thriller-1-by-Beth-A-Sager.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/581618167816481658168/The-Wet-Nose-of-Danger-Rex-Koko-Private-Clown-Book-3-by-James-Finn-Garner.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/881668166816381618167/Paxton-Private-Investigations-Paxton-Private-Investigations-1-by-Juli-Alexander.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/481618162816581648160/Private-Truths-by-C-B-Lewis.pdfIn PDF document text
    • http://owlaokopdf.myhome.cx/18166816181648165/Private-by-Lester-Atwell.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.