PDF malware analysis — malicious · 779cd884d2804ddf

MALICIOUS

PDF

14.7 KB Created: 2019-05-05 16:32:08 +01:00 Authoring application: mPDF 5.7 First seen: 2021-10-16

MD5: 23da4b5a4d11df5c9e7cb2fd85fd5f6d SHA-1: e06709eef360bdf14812f2461f3c71c81a50be85 SHA-256: 779cd884d2804ddf40e1542eb6e4347732f5c6e94f2c47f31d6f1f4884f5f522

100 Risk Score

Malware Insights

MITRE ATT&CK

T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, identified as a link farm. While no scripts were extracted, the heuristic firings and embedded URLs suggest a malicious intent to manipulate search engine results or distribute further content. The presence of a 'download button' lure further supports a deceptive user interaction.

Machine Learning

Nyx PDF Classifier malicious score 0.9798

Heuristics 3

Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM

Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON

Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://muicuiu.dumb1.com/6a05a08a01a09a00/Love-Means-Patience-Farm-7-by-Andrew-Grey.pdf In PDF document text
- http://muicuiu.dumb1.com/4a04a08a05a00a08/Love-Means-No-Limits-Farm-9-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/4a05a07a02a08a03/Love-Means-No-Limits-Farm-6-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/2a08a07a03a09a03/Simple-Gifts-Farm-1-5-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/2a08a07a05a05a07/Love-in-War-Satyr-1-5-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/2a09a09a01a03a06/A-Taste-of-Love-Of-Love-1-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/3a02a09a06a07a05/A-Helping-of-Love-Of-Love-3-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/3a03a08a03a07a04/Love-Comes-Silently-Senses-1-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/4a01a08a05a06a00/Love-Comes-To-Light-Senses-6-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/2a05a07a01a04a05/Love-Comes-in-Darkness-Senses-2-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/1a00a05a05a03a04a07/Demolition-Means-Progress-Flint-Michigan-and-the-Fate-of-the-American-Metropolis-by-Andrew-R-Highsmith.pdfIn PDF document text
- http://muicuiu.dumb1.com/1a07a09a00a00a02/Love-amp-Patience-by-K-lee-Klein.pdfIn PDF document text
- http://muicuiu.dumb1.com/2a02a08a09a02a08/Romance-Is-My-Day-Job-A-Memoir-of-Finding-Love-at-Last-by-Patience-Bloom.pdfIn PDF document text
- http://muicuiu.dumb1.com/3a04a07a00a04a08/Electrochemistry-Chemistry-3-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/4a05a07a02a02a03/Auction-Action-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/1a09a09a00a09a09/Uncorked-Bottled-Up-4-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/3a00a04a07a03a03/Sin-of-Omission-Satyr-7-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/3a03a00a04a04a02/A-Courageous-Ride-The-Bullriders-3-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/3a02a02a02a00a04/Crunch-Time-Work-Out-4-by-Andrew-Grey.pdfIn PDF document text
- http://muicuiu.dumb1.com/4a09a05a02a02a02/Backward-Bronco-s-Boys-3-by-Andrew-Grey.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.