Malicious PDF — malware analysis report

Static analysis result for SHA-256 768ca4f570c40c6b…

MALICIOUS

PDF

17.0 KB Created: 2019-06-13 15:26:54 +01:00 Authoring application: mPDF 5.7
MD5: 14f22733d24ab6f390f878e9bc453e1e SHA-1: c9819c69c59777891558a7195f6a3a4aee132abb SHA-256: 768ca4f570c40c6b72c4b5487be773908df6d6ef81b9145f860e07f9d4127a4c
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified as a link farm. While the document body is heavily obfuscated, the heuristic firings indicate a malicious intent to direct users to external PDF files. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9788

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/6733736730738737/Drink-of-the-Stream-Prayers-of-the-Carmelites-by-Penny-Hickey.pdf
    • http://cefasfese.4pu.com/1732737738731/Unanswered-Prayers-Crystal-Creek-21-by-Penny-Richards.pdf
    • http://cefasfese.4pu.com/7736734731736735/Book-of-Catholic-Prayers---Prayers-for-Every-Day---by-Romain-Kito.pdf
    • http://cefasfese.4pu.com/3733739734734732/Prayers-That-Rout-Demons-Prayers-for-Defeating-Demons-and-Overthrowing-the-Powers-of-Darkness-by-John-Eckhardt.pdf
    • http://cefasfese.4pu.com/9735736730730732/Healthy-Drink-Recipes-All-Natural-Sugar-Free-Gluten-Free-Low-Carb-Paleo-and-Vegan-Drink-Recipes-with-Max-5-Ingredients-by-Elviira-Krebber.pdf
    • http://cefasfese.4pu.com/4730730730734/Not-a-Drop-to-Drink-Not-a-Drop-to-Drink-1-by-Mindy-McGinnis.pdf
    • http://cefasfese.4pu.com/5737732735739/The-Coach-s-Son-by-Jeffrey-Hickey.pdf
    • http://cefasfese.4pu.com/6737735733730/Tatty-by-Christine-Dwyer-Hickey.pdf
    • http://cefasfese.4pu.com/1735735730736735/Our-Dried-Voices-by-Greg-Hickey.pdf
    • http://cefasfese.4pu.com/3739732739732739/That-Weird-City-by-C-Brian-Hickey.pdf
    • http://cefasfese.4pu.com/3735733732739/Not-a-Penny-More-Not-a-Penny-Less-by-Jeffrey-Archer.pdf
    • http://cefasfese.4pu.com/1733736734735732/Not-A-Penny-More-Not-A-Penny-Less-by-Jeffrey-Archer.pdf
    • http://cefasfese.4pu.com/5739731738730739/Serial-Murderers-and-Their-Victims-by-Eric-W-Hickey.pdf
    • http://cefasfese.4pu.com/3735733730737736/The-Lives-of-Women-by-Christine-Dwyer-Hickey.pdf
    • http://cefasfese.4pu.com/2737735730731730/Anything-for-a-Story-Nosy-Neighbor-Mystery-1-by-Cynthia-Hickey.pdf
    • http://cefasfese.4pu.com/6733736732733739/The-Carmelites-The-Province-of-Saint-Elias-by-Alfred-Isacsson.pdf
    • http://cefasfese.4pu.com/6733736730739731/Welcome-to-the-Secular-Order-of-Discalced-Carmelites-by-Aloysius-Deeney.pdf
    • http://cefasfese.4pu.com/6733736731732732/People-s-Companion-to-the-Breviary-Volume-2-by-Carmelites-of-Indianapolis.pdf
    • http://cefasfese.4pu.com/6733736731739735/The-Way-of-the-Carmelites-A-Prayer-Journey-Through-Lent-by-James-McCaffrey.pdf
    • http://cefasfese.4pu.com/4739739738731736/The-Soldier-s-Redemption-Finding-Love-in-Disaster-3-by-Cynthia-Hickey.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.