Malicious PDF — malware analysis report

Static analysis result for SHA-256 78d6516ff74114e1…

MALICIOUS

PDF

21.2 KB Created: 2020-02-15 00:25:32 +00:00 Authoring application: mPDF 5.7
MD5: 214e769bf8ef42ee1290fa555360faf0 SHA-1: b0b09ea1af51942add27eecc1c8db37d5ee7ef78 SHA-256: 78d6516ff74114e16aa6032030de38045b70772cb4c76a72a99794bd7f12fd36
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified as a link farm, which is a common tactic for SEO poisoning or redirecting users to malicious sites. The ML classifier also flagged this PDF as malicious with high confidence. The URLs point to a domain that appears to be used for distributing potentially harmful content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://tuiwckiko.jpn.ph/15d45d15d75d75d3/Best-Served-Cold-First-Law-World-4-by-Joe-Abercrombie.pdf
    • http://tuiwckiko.jpn.ph/65d65d75d05d1/Best-Served-Cold-First-Law-World-4-by-Joe-Abercrombie.pdf
    • http://tuiwckiko.jpn.ph/25d05d75d15d85d8/The-Collected-Joe-Abercrombie-The-Blade-Itself-Before-they-are-Hanged-Last-Argument-of-Kings-Best-Served-Cold-The-Heroes-Red-Country-by-Joe-Abercrombie.pdf
    • http://tuiwckiko.jpn.ph/35d25d75d35d65d2/Best-Served-Cold-Cold-Play-1-by-Eliza-Lloyd.pdf
    • http://tuiwckiko.jpn.ph/45d25d35d85d6/Served-Cold-by-Ed-Goldberg.pdf
    • http://tuiwckiko.jpn.ph/15d95d45d65d95d2/Revenge-Ice-Cream-and-Other-Things-Best-Served-Cold-Broken-Hearts-amp-Revenge-2-by-Katie-Finn.pdf
    • http://tuiwckiko.jpn.ph/95d95d45d05d15d1/The-Great-Leveller-First-Law-World-4-6-by-Joe-Abercrombie.pdf
    • http://tuiwckiko.jpn.ph/25d35d3/Half-the-World-Shattered-Sea-2-by-Joe-Abercrombie.pdf
    • http://tuiwckiko.jpn.ph/25d05d75d45d15d5/Half-the-World-Shattered-Sea-2-by-Joe-Abercrombie.pdf
    • http://tuiwckiko.jpn.ph/35d15d75d05d75d8/Time-Served-Time-Served-1-by-Julianna-Keyes.pdf
    • http://tuiwckiko.jpn.ph/15d65d15d05d35d8/The-Hungry-World-America-s-Cold-War-Battle-Against-Poverty-in-Asia-by-Nick-Cullather.pdf
    • http://tuiwckiko.jpn.ph/55d45d65d25d45d9/Transitions-American-Values-of-Democracy-and-Free-Markets-in-Post-Cold-War-World-by-Ted-Weihe.pdf
    • http://tuiwckiko.jpn.ph/55d15d95d05d15d6/Coca-Colonization-and-the-Cold-War-The-Cultural-Mission-of-the-United-States-in-Austria-After-the-Second-World-War-by-Reinhold-Wagnleitner.pdf
    • http://tuiwckiko.jpn.ph/35d05d85d05d05d3/The-Full-Facts-Book-of-Cold-Reading-A-Comprehensive-Guide-to-the-Most-Persuasive-Psychological-Manipulation-Technique-in-the-World-by-Ian-Rowland.pdf
    • http://tuiwckiko.jpn.ph/15d85d65d55d75d0/The-Murder-Room-The-Heirs-of-Sherlock-Holmes-Gather-to-Solve-the-World-s-Most-Perplexing-Cold-Cases-by-Michael-Capuzzo.pdf
    • http://tuiwckiko.jpn.ph/15d25d15d85d65d0/A-Cold-Day-in-Hell-Cold-Case-Investigation-1-by-Lissa-Marie-Redmond.pdf
    • http://tuiwckiko.jpn.ph/15d75d65d95d65d7/A-Dish-Best-Served-by-J-Richard-Singleton.pdf
    • http://tuiwckiko.jpn.ph/35d15d85d95d35d4/Cold-Fear-Cold-Justice-4-by-Toni-Anderson.pdf
    • http://tuiwckiko.jpn.ph/45d85d65d15d65d4/Cold-Secrets-Cold-Justice-7-by-Toni-Anderson.pdf
    • http://tuiwckiko.jpn.ph/45d75d55d65d65d1/Cold-Malice-Cold-Justice-8-by-Toni-Anderson.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.