Malicious PDF — malware analysis report

Static analysis result for SHA-256 779fb832d8aa51af…

MALICIOUS

PDF

23.5 KB Created: 2019-04-30 03:46:37 +01:00 Authoring application: mPDF 5.7 First seen: 2021-10-16
MD5: 7f7a867254a8d179c70745a794332b93 SHA-1: 3a87bc9933809b14ef0a7b9740b9c36e35f9eddf SHA-256: 779fb832d8aa51af7eb820c39da0cba6be0d43aab14f94d797e6f8f89620a950
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified as a link farm. While the URLs themselves are currently classified as benign, the sheer volume and the heuristic firing indicate a malicious intent, likely for SEO manipulation or to redirect users to potentially harmful content. The ML classifier also flagged this PDF as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9711

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/9a02a06a07a07a09/Pursuing-the-Text-Studies-in-Honor-of-Ben-Zion-Wacholder-on-the-Occasion-of-his-Seventieth-Birthday-by-John-Kampen.pdf In PDF document text
    • http://muicuiu.dumb1.com/7a05a04a02a00a04/Being-There-Together-Essays-In-Honor-Of-Michael-C-J-Putnam-On-The-Occasion-Of-His-Seventieth-Birthday-by-Philip-Thibodeau.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a00a06a06a07a06a07/Kampen-Bouwwerk-in-Kampen-Burgemeester-Van-Kampen-Cultuur-in-Kampen-Evenement-in-Kampen-Geografie-Van-Kampen-Geschiedenis-Van-Kampen-by-Wikipedia.pdfIn PDF document text
    • http://muicuiu.dumb1.com/9a02a06a07a07a06/Eupolemus-A-Study-Of-Judaeo-Greek-Literature-by-Ben-Zion-Wacholder.pdfIn PDF document text
    • http://muicuiu.dumb1.com/9a02a06a07a07a07/The-Dawn-Of-Qumran-The-Sectarian-Torah-And-The-Teacher-Of-Righteousness-by-Ben-Zion-Wacholder.pdfIn PDF document text
    • http://muicuiu.dumb1.com/9a09a04a08a07a08/American-Zion-The-Old-Testament-as-a-Political-Text-from-the-Revolution-to-the-Civil-War-by-Eran-Shalev.pdfIn PDF document text
    • http://muicuiu.dumb1.com/9a05a02a03a06a03/Pauline-Studies-Essays-Presented-To-Professor-F-F-Bruce-On-His-70th-Birthday-by-Donald-Hagner.pdfIn PDF document text
    • http://muicuiu.dumb1.com/8a01a07a01a01a02/The-Renaissance-Studies-in-Art-and-Poetry-The-1893-Text-by-Walter-Pater.pdfIn PDF document text
    • http://muicuiu.dumb1.com/7a02a07a01a09a01/Germanic-Studies-In-Honor-Of-Anatoly-Liberman-by-Kurt-Gustav-Goblirsch.pdfIn PDF document text
    • http://muicuiu.dumb1.com/4a06a02a02a00/A-Light-in-Zion-Zion-Chronicles-4-by-Bodie-Thoene.pdfIn PDF document text
    • http://muicuiu.dumb1.com/4a06a01a07a00/The-Return-to-Zion-Zion-Chronicles-3-by-Bodie-Thoene.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a03a05a02a09a06/The-Key-to-Zion-Zion-Chronicles-5-by-Bodie-Thoene.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a04a03a01a00a06/A-Fragile-Beauty-John-Nichols-Milagro-Country-Text-and-Photographs-from-His-Life-and-Work-by-John-Nichols.pdfIn PDF document text
    • http://muicuiu.dumb1.com/9a08a06a09a00a04/Happy-Birthday-to-Me-Again-Birthday-Trilogy-2-by-Brian-Rowe.pdfIn PDF document text
    • http://muicuiu.dumb1.com/7a09a01a08a07a01/Herman-Wells-Stories-As-Told-by-His-Friends-on-His-90th-Birthday-by-John-Gallman.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a07a00a06a00a05/Pursuing-Your-Purpose-Volume-II-The-Roadmap-To-A-Fulfilled-Life-Pursuing-Your-Purpose---The-Roadmap-To-A-Fulfilled-Life-Book-2-by-Carl-Mathis.pdfIn PDF document text
    • http://muicuiu.dumb1.com/8a05a07a05a02a07/Wuthering-Heights-The-Graphic-Novel-Original-Text-by-John-M-Burns.pdfIn PDF document text
    • http://muicuiu.dumb1.com/9a03a09a00a01a03/Jove-Laughs-They-Say-Lewinsky-as-Text-by-John-Stuart-Gillis.pdfIn PDF document text
    • http://muicuiu.dumb1.com/4a04a09a08a08a08/Wuthering-Heights-The-Graphic-Novel-Original-Text-by-John-M-Burns.pdfIn PDF document text
    • http://muicuiu.dumb1.com/3a09a09a08a00a02/Honor-Knows-No-Borders-by-John-Sharer.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.