Malicious PDF — malware analysis report

Static analysis result for SHA-256 78a2d68a8d5e8b5d…

MALICIOUS

PDF

15.7 KB Created: 2019-05-07 03:33:37 +01:00 Authoring application: mPDF 5.7
MD5: 4b38cd146f5408b8312ef09a494bed98 SHA-1: 4aeb91753d30ae12045efcb82a563abcbe5d5933 SHA-256: 78a2d68a8d5e8b5d94fbc6838453173d5988fd56d7c48fd6b20f28b9a1433a0e
100 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, identified as a PDF SEO link farm. While the document body is unreadable, the heuristic firings and the presence of numerous links suggest a malicious intent to manipulate search engine results or direct users to potentially harmful content. No scripts were extracted, but the link farm activity is a strong indicator of malicious intent.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9778

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/6a00a08a09a07a06/Bonsai-Masterclass-by-Peter-Chan.pdf
    • http://muicuiu.dumb1.com/6a00a08a08a09a06/Bonsai-Secrets-by-Peter-Chan.pdf
    • http://muicuiu.dumb1.com/6a04a05a03a08/Growing-Deep-With-God-Integrating-Theology-And-Prayer-by-Edmund-Chan.pdf
    • http://muicuiu.dumb1.com/6a00a09a00a03a08/Bonsai-Landscapes-by-Peter-D-Adams.pdf
    • http://muicuiu.dumb1.com/3a07a06a01a04a05/Bloody-Bonsai-Elderhostel-1-by-Peter-E-Abresch.pdf
    • http://muicuiu.dumb1.com/6a00a09a00a04a00/Bonsai-Tree-Care-Bailout-A-Beginner-s-Bonsai-Guide-by-Joshua-Rothman.pdf
    • http://muicuiu.dumb1.com/6a00a08a08a08a06/The-Secret-Techniques-of-Bonsai-A-Guide-to-Starting-Raising-and-Shaping-Bonsai-by-Masakuni-Kawasumi-II.pdf
    • http://muicuiu.dumb1.com/8a03a06a03a00a09/Bonsai-Tree-How-to-Create-Bonsai-Art-at-Home-by-Tsukuru-Kurono.pdf
    • http://muicuiu.dumb1.com/7a00a02a00a00/The-Wall-Growing-Up-Behind-the-Iron-Curtain-by-Peter-S-s.pdf
    • http://muicuiu.dumb1.com/1a09a08a03a07/Dyke-Life-From-Growing-Up-To-Growing-Old-A-Celebration-Of-The-Lesbian-Experience-by-Karla-Jay.pdf
    • http://muicuiu.dumb1.com/6a00a08a08a08a00/Bonsai-by-Susan-Lang.pdf
    • http://muicuiu.dumb1.com/6a00a09a00a02a08/The-Essentials-Of-Bonsai-by-Shufunotomo.pdf
    • http://muicuiu.dumb1.com/6a08a04a06a06a00/Four-Seasons-of-Bonsai-by-Kyuzo-Murata.pdf
    • http://muicuiu.dumb1.com/6a00a08a08a08a02/Bonsai-for-Beginners-by-Craig-Coussins.pdf
    • http://muicuiu.dumb1.com/6a00a09a00a03a03/Cultivating-Bonsai-by-Sterling-Publishing.pdf
    • http://muicuiu.dumb1.com/6a00a08a08a07a03/Indoor-Bonsai-by-Paul-Lesniewicz.pdf
    • http://muicuiu.dumb1.com/6a00a08a08a06a05/Bonsai-101-Essential-Tips-by-Harry-Tomlinson.pdf
    • http://muicuiu.dumb1.com/3a09a04a00a08a03/Bedtime-for-Bonsai-Guys-amp-Dogs-4-by-Elaine-Fox.pdf
    • http://muicuiu.dumb1.com/6a00a08a09a07a09/Bonsai-Master-Class-by-Craig-Coussins.pdf
    • http://muicuiu.dumb1.com/4a07a01a02a05a09/The-Choosing-by-Annabelle-Jacobs.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.