Malicious PDF — malware analysis report

Static analysis result for SHA-256 7ad14a74e569be6e…

MALICIOUS

PDF

17.9 KB Created: 2019-04-30 23:22:32 +01:00 Authoring application: mPDF 5.7
MD5: 50f16bfa5aedac227717151c5cb55bc2 SHA-1: a49bb1480ce726af04bfa8f9d7d31982d812e017 SHA-256: 7ad14a74e569be6e9e84c67cddaed5f68a837a8b9d7916d1f3375fb5ad44aabf
100 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, identified as a link farm. While the document body is unreadable, the presence of numerous links and a 'download button' heuristic suggests a malicious intent to drive traffic or potentially distribute further content. The ML classifier also strongly indicated maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9807

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a01a09a07a03a07a03/Dodger-of-the-Dials-Dodger-2-by-James-Benmore.pdf
    • http://muicuiu.dumb1.com/4a03a09a02a04a02/Tommy-Black-and-the-Staff-of-Light-Tommy-Black-1-by-Jake-Kerr.pdf
    • http://muicuiu.dumb1.com/3a02a03a09a03a08/Dodger-by-Terry-Pratchett.pdf
    • http://muicuiu.dumb1.com/4a05a02a03a00a02/Artful-by-Peter-David.pdf
    • http://muicuiu.dumb1.com/7a01a06a07a09a07/Tommy-Robinson-Enemy-of-the-State-by-Tommy-Robinson.pdf
    • http://muicuiu.dumb1.com/4a02a06a03a00a08/Dodger-Dogs-to-Fenway-Franks-And-All-the-Wieners-in-Between-by-Bob-Wood.pdf
    • http://muicuiu.dumb1.com/4a02a07a02a04a04/Once-a-Bum-Always-a-Dodger-My-Life-in-Baseball-from-Brooklyn-to-Los-Angeles-by-Don-Drysdale.pdf
    • http://muicuiu.dumb1.com/6a00a04a01a00a08/The-Artful-Universe-Expanded-by-John-D-Barrow.pdf
    • http://muicuiu.dumb1.com/8a04a03a09a03a09/The-Artful-Life-of-R-Vijay-by-Annapurna-Garimella.pdf
    • http://muicuiu.dumb1.com/5a04a02a08a05a09/Dodger-Blue-Will-Fill-Your-Soul-by-Bryan-Allen-Fierro.pdf
    • http://muicuiu.dumb1.com/3a09a04a05a03a05/Speeding-Down-the-Spiral-An-Artful-Adventure-by-Deborah-Goodman-Davis.pdf
    • http://muicuiu.dumb1.com/1a08a01a03a01a09/The-Case-of-the-Artful-Crime-Nancy-Drew-106-by-Carolyn-Keene.pdf
    • http://muicuiu.dumb1.com/4a03a04a08a06a07/O-Artful-Death-A-Sweeney-St-George-Mystery-1-by-Sarah-Stewart-Taylor.pdf
    • http://muicuiu.dumb1.com/4a07a05a05a01a05/The-Perfect-Pitch-The-Biography-of-Roger-Owens-the-Famous-Peanut-Man-at-Dodger-Stadium-by-Daniel-S-Green.pdf
    • http://muicuiu.dumb1.com/3a01a02a04a08a09/Books-for-Kids-Tommy-Tiger-and-the-New-Bike-Illustration-Book-Ages-3-8-Short-Stories-for-Kids-Kids-Books-Bedtime-Stories-For-Kids-Children-Books-Early-Readers-by-Tommy-Tiger.pdf
    • http://muicuiu.dumb1.com/8a01a07a04/There-There-by-Tommy-Orange.pdf
    • http://muicuiu.dumb1.com/4a04a00a07a06a00/Tommyland-by-Tommy-Lee.pdf
    • http://muicuiu.dumb1.com/2a06a07a00/Thanks-for-the-Trouble-by-Tommy-Wallach.pdf
    • http://muicuiu.dumb1.com/4a00a09a02a01a00/The-Pulptress-by-Tommy-Hancock.pdf
    • http://muicuiu.dumb1.com/6a02a07a01a04a05/Balls-by-Tommy-Dakar.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.