Malicious PDF — malware analysis report

Static analysis result for SHA-256 77f924b88451aef5…

MALICIOUS

PDF

18.3 KB Created: 2019-05-07 05:36:05 +01:00 Authoring application: mPDF 5.7 First seen: 2021-10-23
MD5: fe8ef9b034f3243f90fdc27128679c7b SHA-1: ad88edb9973f1e70549c27d579ed9e196ce26545 SHA-256: 77f924b88451aef5f1bcbc3accc993948ec4f8995cfe689d79f9398c9ac73817
100 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links disguised as historical documents, a technique often used to trick users into downloading malicious content. The ML classifier strongly indicated maliciousness, and the PDF structure suggests a link farm designed for SEO poisoning or malware distribution. No scripts were extracted, but the embedded URLs are the primary indicators of malicious intent.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9775

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/8a03a01a09a02/Escaping-Salem-The-Other-Witch-Hunt-of-1692-by-Richard-Godbeer.pdf In PDF document text
    • http://muicuiu.dumb1.com/8a04a02a02a03a02/1692-Witch-Hunt-The-Layman-s-Guide-To-The-Salem-Witchcraft-Trials-by-George-Malcolm-Yool.pdfIn PDF document text
    • http://muicuiu.dumb1.com/8a04a02a02a01a00/Salem-Story-Reading-the-Witch-Trials-of-1692-by-Bernard-Rosenthal.pdfIn PDF document text
    • http://muicuiu.dumb1.com/4a05a07a01a03a09/Witch-Hunt-Mysteries-of-the-Salem-Witch-Trials-by-Marc-Aronson.pdfIn PDF document text
    • http://muicuiu.dumb1.com/7a03a06a03a05a01/Judge-Sewall-s-Apology-The-Salem-Witch-Trials-and-the-Forming-of-an-American-Conscience-by-Richard-Francis.pdfIn PDF document text
    • http://muicuiu.dumb1.com/8a04a02a03a02a00/1692-Salem-s-Guardian-by-A-Mazur.pdfIn PDF document text
    • http://muicuiu.dumb1.com/8a04a02a03a01a06/The-Salem-Belle-A-Tale-of-1692-by-Anonymous.pdfIn PDF document text
    • http://muicuiu.dumb1.com/8a04a02a02a09a08/The-Salem-Belle-a-Tale-of-1692-by-Tappand-and-Dennet.pdfIn PDF document text
    • http://muicuiu.dumb1.com/8a08a03a00a09a03/The-Witches-Suspicion-Betrayal-and-Hysteria-in-1692-Salem-by-Stacy-Schiff.pdfIn PDF document text
    • http://muicuiu.dumb1.com/8a04a02a02a01a05/The-Rescue-Christian-Heritage-The-Salem-Years-1690-1692-1-by-Nancy-N-Rue.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a01a00a00a09a09a03/Witch-Children-From-Salem-Witch-Hunts-to-Modern-Courtrooms-by-Hans-Sebald.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a03a02a09a01a03/The-Secret-Of-Bryn-Estyn-The-Making-Of-A-Modern-Witch-Hunt-by-Richard-Webster.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a08a07a05a07a01/Competition-s-a-Witch-Salem-Witch-2-by-Kelly-McClymer.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a08a07a05a07a07/She-s-a-Witch-Girl-Salem-Witch-3-by-Kelly-McClymer.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a07a04a00a07a08/Witch-Hunt-Witch-Finder-2-by-Ruth-Warburton.pdfIn PDF document text
    • http://muicuiu.dumb1.com/8a05a00a03a06/I-Tituba-Black-Witch-of-Salem-by-Maryse-Cond-.pdfIn PDF document text
    • http://muicuiu.dumb1.com/8a02a02a06a00/A-Break-with-Charity-A-Story-about-the-Salem-Witch-Trials-by-Ann-Rinaldi.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a01a01a08a02a06a07/Wicked-Girls-A-Novel-of-the-Salem-Witch-Trials-by-Stephanie-Hemphill.pdfIn PDF document text
    • http://muicuiu.dumb1.com/7a03a07a05a03a04/You-Wouldn-t-Want-to-Be-a-Salem-Witch-Bizarre-Accusations-You-d-Rather-Not-Face-by-Jim-Pipe.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a01a04a06a05a02/Salem-Witch-Judge-The-Life-and-Repentance-of-Samuel-Sewall-by-Eve-LaPlante.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.