Malicious PDF — malware analysis report

Static analysis result for SHA-256 74b802d0cc5bdc94…

MALICIOUS

PDF

20.2 KB Created: 2019-05-02 06:12:09 +01:00 Authoring application: mPDF 5.7 First seen: 2020-12-28
MD5: dd41fff30713ba045a559389fa5bb929 SHA-1: f01c71f34f2366d9b141dff76e990e6ce7043c7d SHA-256: 74b802d0cc5bdc949050223b626bd1dd69269e374d9331aa9b01742dc21a2023
152 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, identified as a link farm. While no scripts were explicitly extracted, the heuristic 'PDF_SEO_LINK_FARM' and the presence of numerous URLs suggest the document's primary purpose is to redirect users to a network of other documents, potentially for SEO manipulation or to host malicious content. The ClamAV detection as 'Pdf.Dropper.Agent-9208707-0' further supports its malicious nature.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9922

Heuristics 3

  • ClamAV: Pdf.Dropper.Agent-9208707-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Dropper.Agent-9208707-0
  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/4736736732733734/The-Billionaire-s-Masquerade-Betting-on-You-2-by-Jeannette-Winters.pdf In PDF document text
    • http://cefasfese.4pu.com/9731733735734732/The-Billionaire-s-Jackpot-Betting-on-You-4-by-Jeannette-Winters.pdfIn PDF document text
    • http://cefasfese.4pu.com/8734732731732/The-Billionaire-s-First-Christmas-Winters-Love-1-by-Holly-Rayner.pdfIn PDF document text
    • http://cefasfese.4pu.com/2738731739732731/The-Billionaire-s-Passion-The-Billionaire-s-Kiss-Book-Four-A-Billionaire-Alpha-Romance-by-Olivia-Thorne.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730735733733738734/-Beyond-Band-of-Brothers-The-War-Memoirs-of-Major-Dick-Winters-BEYOND-BAND-OF-BROTHERS-THE-WAR-MEMOIRS-OF-MAJOR-DICK-WINTERS-By-Winters-Dick-Author-May-01-2008-Paperback-by-Dick-Winters.pdfIn PDF document text
    • http://cefasfese.4pu.com/2730736738734732/Betting-on-the-Devil-by-Emma-Mohr.pdfIn PDF document text
    • http://cefasfese.4pu.com/1737732733737734/Betting-the-Bad-Boy-Destiny-2-by-Sugar-Jamison.pdfIn PDF document text
    • http://cefasfese.4pu.com/3739732733738732/Betting-It-All-Hellfire-Riders-MC-4-by-Kati-Wilde.pdfIn PDF document text
    • http://cefasfese.4pu.com/4731732734733738/Betting-on-Bailey-Playing-For-Love-1-by-Tara-Crescent.pdfIn PDF document text
    • http://cefasfese.4pu.com/1738738730738731/Betting-on-Hope-Four-of-Hearts-Ranch-Romance-1-by-Debra-Clopton.pdfIn PDF document text
    • http://cefasfese.4pu.com/7732737738738/Football-Betting-How-to-increase-your-chances-of-winning-by-Francis-Okumu.pdfIn PDF document text
    • http://cefasfese.4pu.com/3734737739739733/Betting-on-Grace-Dead-Heat-Ranch-1-by-Nicole-Edwards.pdfIn PDF document text
    • http://cefasfese.4pu.com/4734733735730732/The-Billionaire-s-Desire-A-Single-Dad-Romance-The-Billionaire-s-Touch-Book-4-by-L-N-Pearl.pdfIn PDF document text
    • http://cefasfese.4pu.com/3737736735737/Stranded-with-a-Billionaire-Billionaire-Boys-Club-1-by-Jessica-Clare.pdfIn PDF document text
    • http://cefasfese.4pu.com/2739737736738738/The-Billionaire-s-Final-Stand-Billionaire-Bachelors-7-by-Melody-Anne.pdfIn PDF document text
    • http://cefasfese.4pu.com/1737731732739739/All-That-She-Wants-The-Billionaire-s-Point-of-View-The-Billionaire-s-Seduction-1-5-by-Olivia-Thorne.pdfIn PDF document text
    • http://cefasfese.4pu.com/3739732739736/Beauty-and-the-Billionaire-Billionaire-Boys-Club-2-by-Jessica-Clare.pdfIn PDF document text
    • http://cefasfese.4pu.com/1734734734739739/The-Billionaire-s-Marriage-Proposal-Billionaire-Bachelors-4-by-Melody-Anne.pdfIn PDF document text
    • http://cefasfese.4pu.com/2737733739730738/The-Reclusive-Billionaire-Destination-Billionaire-Romance-1-by-Lucy-McConnell.pdfIn PDF document text
    • http://cefasfese.4pu.com/7738732736735731/The-Billionaire-s-Bet-Complete-Series-The-Billionaire-s-Bet-1-4-by-Clarissa-Wild.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.