Malicious PDF — malware analysis report

Static analysis result for SHA-256 77e687fd0352af3d…

MALICIOUS

PDF

16.3 KB Created: 2020-03-19 01:20:48 +00:00 Authoring application: mPDF 5.7
MD5: 8220cd8b6b5c2159a8b99719d4faa589 SHA-1: a92bb4d74ddfa6d5298453a56f1ac1e480768cbb SHA-256: 77e687fd0352af3d71688dbe88356a9cf49d30fec05316acd869e764ce034c03
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links, identified as a link farm, all pointing to external domains. The ML classifier also flagged this PDF as malicious. The embedded links likely serve as a lure to direct users to potentially malicious websites for further exploitation or phishing.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9811

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ieuicufioao.myhome.cx/4556558553553554/The-Boy-Who-Came-In-From-the-Cold-The-Boy-Who-Came-in-From-the-Cold-1-by-B-G-Thomas.pdf
    • http://ieuicufioao.myhome.cx/2552553555550556/The-Boy-Who-Came-In-From-the-Cold-The-Boy-Who-Came-in-From-the-Cold-1-by-B-G-Thomas.pdf
    • http://ieuicufioao.myhome.cx/1552551558556550/A-Cold-Day-in-Hell-Cold-Case-Investigation-1-by-Lissa-Marie-Redmond.pdf
    • http://ieuicufioao.myhome.cx/4558554557559558/The-Cold-Cold-Ground-Detective-Sean-Duffy-1-by-Adrian-McKinty.pdf
    • http://ieuicufioao.myhome.cx/3551555552559554/Cold-Hearted-Cold-Justice-6-by-Toni-Anderson.pdf
    • http://ieuicufioao.myhome.cx/4550551550559551/Cold-Light-Cold-Series-2-by-Narise-Konohara.pdf
    • http://ieuicufioao.myhome.cx/3552557553556552/Best-Served-Cold-Cold-Play-1-by-Eliza-Lloyd.pdf
    • http://ieuicufioao.myhome.cx/4551555558557552/Cold-Blooded-Cold-Justice-9-by-Toni-Anderson.pdf
    • http://ieuicufioao.myhome.cx/4551554557557556/In-From-the-Cold-Cold-Country-1-by-Mercy-Celeste.pdf
    • http://ieuicufioao.myhome.cx/1552550557557550/The-Cold-Cold-Sea-by-Linda-Huber.pdf
    • http://ieuicufioao.myhome.cx/1556558559558/The-Cold-Spot-Cold-1-by-Tom-Piccirilli.pdf
    • http://ieuicufioao.myhome.cx/2555557551556556/Anything-Could-Happen-The-Boy-Who-Came-in-From-the-Cold-2-by-B-G-Thomas.pdf
    • http://ieuicufioao.myhome.cx/3557556555553559/Cold-Case-FBI---The-Salem-Witch-Cold-Case-FBI-Series-by-William-Dusty.pdf
    • http://ieuicufioao.myhome.cx/8559551558557551/Cold-Stove-League-by-Thomas-Boyle.pdf
    • http://ieuicufioao.myhome.cx/3554555556553552/A-Cold-Creek-Holiday-Cowboys-of-Cold-Creek-6-by-RaeAnne-Thayne.pdf
    • http://ieuicufioao.myhome.cx/3554555556553551/A-Cold-Creek-Secret-Cowboys-of-Cold-Creek-7-by-RaeAnne-Thayne.pdf
    • http://ieuicufioao.myhome.cx/1550553554550553/Stone-Cold-Stone-Cold-1-by-J-D-Weston.pdf
    • http://ieuicufioao.myhome.cx/4550551553/Bright-Smoke-Cold-Fire-Bright-Smoke-Cold-Fire-1-by-Rosamund-Hodge.pdf
    • http://ieuicufioao.myhome.cx/1550558550556557550/My-Cold-War-by-Tom-Piazza.pdf
    • http://ieuicufioao.myhome.cx/2558555551556550/The-Spy-Who-Came-in-from-the-Cold-by-John-le-Carr-.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.