Malicious PDF — malware analysis report

Static analysis result for SHA-256 720ceedc55d1d804…

MALICIOUS

PDF

22.1 KB Created: 2020-03-12 01:19:36 +00:00 Authoring application: mPDF 5.7
MD5: 3e18b083d4fa5c71b7c2dd6d66482fb9 SHA-1: f3f26d7fcd20760161c22a4db5633f350d15f546 SHA-256: 720ceedc55d1d80477216107861ef14a8bef038aa9f28f8ef361494e3c70feb6
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded links pointing to external PDF files hosted on the domain 'eascasas.myhome.cx'. This heuristic firing, combined with the ML classifier's high confidence, suggests a malicious link farm or SEO poisoning attempt. No scripts were extracted, but the structure implies an attempt to direct users to potentially malicious content, likely as a form of phishing or malware distribution. The document body was unreadable, preventing further analysis of its specific lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9900

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://eascasas.myhome.cx/1aa5aa3aa8aa4aa0/Bayou-Salado-The-Story-of-South-Park-by-Virginia-McConnell-Simmons.pdf
    • http://eascasas.myhome.cx/3aa3aa4aa8aa6aa3/Arsenic-Under-the-Elms-Murder-in-Victorian-New-Haven-by-Virginia-A-McConnell.pdf
    • http://eascasas.myhome.cx/5aa1aa8aa3aa1aa7/Lister-Hill-Statesman-from-the-South-by-Virginia-Van-der-Veer-Hamilton.pdf
    • http://eascasas.myhome.cx/4aa4aa3aa8aa9aa3/Bayou-Drama-A-Collection-of-Stories-from-the-Bayou-City-by-Darine-Davis.pdf
    • http://eascasas.myhome.cx/4aa0aa5aa8aa3aa1/Bayou-Shadow-Protector-Bayou-Magic-2-by-Debbie-Herbert.pdf
    • http://eascasas.myhome.cx/5aa8aa4aa4aa3aa2/Bayou-My-Love-Bayou-Sabine-1-by-Lauren-Faulkenberry.pdf
    • http://eascasas.myhome.cx/1aa1aa6aa2aa9aa6aa0/Jurassic-Park-Michael-Crichton-List-of-Jurassic-Park-Characters-the-Lost-World-Jurassic-Park-Jurassic-Park-III-Biological-Issue-by-Source-Wikipedia.pdf
    • http://eascasas.myhome.cx/2aa0aa6aa6aa4aa0/Bayou-No-l-Bayou-Heat-8-5-by-Alexandra-Ivy.pdf
    • http://eascasas.myhome.cx/6aa2aa2aa2aa6aa3/KISS-SANS-FARD-L-autobiographie-de-Gene-Simmons-by-Gene-Simmons.pdf
    • http://eascasas.myhome.cx/9aa5aa7aa1aa6aa0/The-Official-Letters-Of-Alexander-Spotswood-Lieutenant-governor-Of-The-Colony-Of-Virginia-1710-1722-Now-First-Printed-From-The-Manuscript-In-The-Collections-Of-The-Virginia-Historical-Society-by-Virginia-Lieutenant-Governor.pdf
    • http://eascasas.myhome.cx/9aa5aa7aa1aa6aa6/The-Official-Letters-of-Alexander-Spotswood-Lieutenant-Governor-of-the-Colony-of-Virginia-1710-1722-Now-First-Printed-from-the-Manuscript-in-the-Collections-of-the-Virginia-Historical-Society-Volume-2-by-Virginia-Lieutenant-Governor.pdf
    • http://eascasas.myhome.cx/1aa0aa6aa4aa8aa3/The-Spy-with-the-Wooden-Leg-The-Story-of-Virginia-Hall-by-Nancy-Polette.pdf
    • http://eascasas.myhome.cx/4aa8aa0aa5aa6aa0/33-A-Gay-Love-Story-by-Justin-South.pdf
    • http://eascasas.myhome.cx/4aa0aa1aa2aa4/A-Long-Walk-to-Water-Based-on-a-True-Story-by-Linda-Sue-Park.pdf
    • http://eascasas.myhome.cx/2aa9aa8aa3aa6/South-by-Southwest-A-Western-Story-by-Johnny-D-Boggs.pdf
    • http://eascasas.myhome.cx/2aa6aa7aa1aa1aa7/Perfect-Wives-in-Ideal-Homes-The-Story-of-Women-in-the-1950s-by-Virginia-Nicholson.pdf
    • http://eascasas.myhome.cx/6aa0aa7aa0aa0aa7/The-Wizard-of-Menlo-Park-the-Story-of-Thomas-Alva-Edison-by-Mickie-Compere.pdf
    • http://eascasas.myhome.cx/4aa2aa7aa3aa4aa5/Bayou-Heat-Collection-One-Bayou-Heat-1-6-by-Alexandra-Ivy.pdf
    • http://eascasas.myhome.cx/6aa0aa6aa8aa9aa4/The-Story-of-Thomas-Alva-Edison-Inventor-The-Wizard-of-Menlo-Park-by-Mickie-Compere.pdf
    • http://eascasas.myhome.cx/2aa5aa2aa1aa2aa6/French-Dirt-The-Story-of-a-Garden-in-the-South-of-France-by-Richard-Goodman.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.