Malicious PDF — malware analysis report

Static analysis result for SHA-256 732cea17f39081a3…

MALICIOUS

PDF

18.0 KB Created: 2019-05-03 06:00:15 +01:00 Authoring application: mPDF 5.7
MD5: a03832427a2343164b0bfd0e4530c958 SHA-1: 8c73e60cbdc19341a7aaaec0669355a41799c392 SHA-256: 732cea17f39081a34fae6a5965beb3682cee2be857ed1cee46ed2b4fdc816cc2
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to a single domain, suggesting a link farm or SEO poisoning attempt. The ML classifier also flagged this PDF as malicious. The primary attack pattern involves directing users to external content, likely as a precursor to further malicious activity or to generate ad revenue.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9788

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/4736731735737733/The-Coal-Black-Asphalt-Tomb-Berger-and-Mitry-10-by-David-Handler.pdf
    • http://cefasfese.4pu.com/7730731730730732/The-Burnt-Orange-Sunrise-Berger-and-Mitry-4-by-David-Handler.pdf
    • http://cefasfese.4pu.com/7730731730730733/The-Sour-Cherry-Surprise-Berger-and-Mitry-6-by-David-Handler.pdf
    • http://cefasfese.4pu.com/7730731730734737/The-Sweet-Golden-Parachute-Berger-and-Mitry-5-by-David-Handler.pdf
    • http://cefasfese.4pu.com/7730731730730731/The-Bright-Silver-Star-Berger-and-Mitry-3-by-David-Handler.pdf
    • http://cefasfese.4pu.com/7730731731732731/Lavender-Lane-Lothario-Berger-and-Mitry-11-by-David-Handler.pdf
    • http://cefasfese.4pu.com/5731738730730733/Coal-Black-Heart-The-Story-of-Coal-and-Lives-it-Ruled-by-John-Demont.pdf
    • http://cefasfese.4pu.com/4735736738735735/Twisted-Asphalt-Asphalt-Outlaw-1-by-Blue-Remy.pdf
    • http://cefasfese.4pu.com/6736736733732734/Coal-Hard-Habitat-The-Travails-of-a-Coal-Miner-s-Son-by-Joanne-Leila-Smith.pdf
    • http://cefasfese.4pu.com/7736733730737737/The-Girl-with-Kaleidoscope-Eyes-Stewart-Hoag-Mystery-9-by-David-Handler.pdf
    • http://cefasfese.4pu.com/1738735735739734/The-Buffalo-Creek-Disaster-How-the-Survivors-of-One-of-the-Worst-Disasters-in-Coal-Mining-History-Brought-Suit-Against-the-Coal-Company--And-Won-by-Gerald-M-Stern.pdf
    • http://cefasfese.4pu.com/2734733734739734/Finding-Balance-Task-Force-Gaea-1-by-David-Berger.pdf
    • http://cefasfese.4pu.com/6737737735731734/Maigrir-avec-la-lune-Faites-fondre-vos-kilos-superflus-en-suivant-les-cycles-lunaires-de-Carole-Berger-by-Carole-Berger.pdf
    • http://cefasfese.4pu.com/7735730739733731/Lara-Croft-Tomb-Raider-The-Man-of-Bronze-Lara-Croft-Tomb-Raider-3-by-James-Alan-Gardner.pdf
    • http://cefasfese.4pu.com/5730739733735737/Asphalt-by-Rebekah-Remington.pdf
    • http://cefasfese.4pu.com/3730735731730730/Scar-Asphalt-Gods-MC-1-by-Morgan-Jane-Mitchell.pdf
    • http://cefasfese.4pu.com/4735736733730738/Kings-of-Asphalt-Club-Chrome-1-by-Alexx-Andria.pdf
    • http://cefasfese.4pu.com/3736730730738731/Sunrise-Asphalt-Gods-MC-4-by-Morgan-Jane-Mitchell.pdf
    • http://cefasfese.4pu.com/7730735734739730/Hot-Mix-Asphalt-Paving-Handbook-2000-by-Rona-Briere.pdf
    • http://cefasfese.4pu.com/3735739736731735/Hell-on-Heelz-Asphalt-Gods-MC-3-by-Morgan-Jane-Mitchell.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.