Malicious PDF — malware analysis report

Static analysis result for SHA-256 779ae2f55894896e…

MALICIOUS

PDF

22.2 KB Created: 2020-01-02 06:04:49 +00:00 Authoring application: mPDF 5.7 First seen: 2021-10-14
MD5: 54409b1668f9bcef91bec9650243be1c SHA-1: 9add4c99b4ce37f36b71734bc65499e112941e60 SHA-256: 779ae2f55894896ea2a248c2fb118e2be23d4a41fe2ca5aa883a1f89f0726d35
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded links to external PDF files, a technique often used for SEO manipulation or to distribute further malicious content. While the specific intent is unclear, the heuristic firings and the sheer volume of links suggest a malicious purpose. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/2734739732739736/The-Wild-One-50-Loving-States-Montana-by-Theodora-Taylor.pdf In PDF document text
    • http://cefasfese.4pu.com/2734739731737735/Her-Viking-Wolf-50-Loving-States-Colorado-50-Loving-States-3-by-Theodora-Taylor.pdfIn PDF document text
    • http://cefasfese.4pu.com/2731731737738733/His-One-and-Only-50-Loving-States-Alabama-by-Theodora-Taylor.pdfIn PDF document text
    • http://cefasfese.4pu.com/2735730735735733/His-to-Own-50-Loving-States-Arkansas-by-Theodora-Taylor.pdfIn PDF document text
    • http://cefasfese.4pu.com/9739738730737730/NAGO-His-Mississippi-Queen-50-Loving-States-Mississippi-The-Brothers-Nightwolf-Trilogy-Book-1-by-Theodora-Taylor.pdfIn PDF document text
    • http://cefasfese.4pu.com/5733731737737736/His-to-Princess-a-modern-fairytale-romance-Loving-World-Les-Iles-de-la-Victoire-by-Theodora-Taylor.pdfIn PDF document text
    • http://cefasfese.4pu.com/4738736736739732/Luca---His-to-Possess-A-Ruthless-Scion-Novella-by-Theodora-Taylor.pdfIn PDF document text
    • http://cefasfese.4pu.com/4731735733734731/Ishi-in-Two-Worlds-A-Biography-of-the-Last-Wild-Indian-in-North-America-Deluxe-illustrated-edition-in-large-format-by-Theodora-Kroeber.pdfIn PDF document text
    • http://cefasfese.4pu.com/9734736735733736/Japanese-Fairy-Tales-By-Yei-Theodora-Ozaki---Illustrated-by-Yei-Theodora-Ozaki.pdfIn PDF document text
    • http://cefasfese.4pu.com/2733730730736733/His-Blushing-Bride-Montana-Born-Brides-2-Love-in-Montana-4-by-Dani-Collins.pdfIn PDF document text
    • http://cefasfese.4pu.com/4738731734737735/Montana-Christmas-Made-in-Montana-4-by-Jackie-Merritt.pdfIn PDF document text
    • http://cefasfese.4pu.com/5731736738734733/Proceedings-of-the-Third-International-Workshop-on-Nude-Mice-Montana-State-University-Bozeman-Montana-September-6-9-1979-by-Norman-D-Reed.pdfIn PDF document text
    • http://cefasfese.4pu.com/2735730734736732/Healing-Montana-Sky-Montana-Sky-5-by-Debra-Holland.pdfIn PDF document text
    • http://cefasfese.4pu.com/4731734734731732/Starry-Montana-Sky-Montana-Sky-2-by-Debra-Holland.pdfIn PDF document text
    • http://cefasfese.4pu.com/4731734734730733/Montana-Sky-Christmas-Montana-Sky-3-1-by-Debra-Holland.pdfIn PDF document text
    • http://cefasfese.4pu.com/4731734734731733/Stormy-Montana-Sky-Montana-Sky-3-by-Debra-Holland.pdfIn PDF document text
    • http://cefasfese.4pu.com/8731738736739738/101-Sex-Positions-Steamy-New-Positions-From-Mild-to-Wild-by-Samm-Taylor.pdfIn PDF document text
    • http://cefasfese.4pu.com/3736732731739733/Loving-Jay-Loving-You-1-by-Renae-Kaye.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730731734733733731/United-States-Circuit-Court-of-Appeals-for-the-Ninth-Circuit-1912-Vol-5-of-6-Transcript-of-Record-William-F-Kettenbach-and-George-H-Kester-Plaintiffs-in-Error-Vs-The-United-States-of-America-Defendant-in-Error-Pages-1521-to-1916-Inclusive-by-United-States-Court-of-Appeals.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731738737732732/The-Thorn-and-the-Blossom-by-Theodora-Goss.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.