Malicious PDF — malware analysis report

Static analysis result for SHA-256 7aee41316281d6ab…

MALICIOUS

PDF

16.8 KB Created: 2019-11-08 00:42:29 +00:00 Authoring application: mPDF 5.7
MD5: d27ed3eeff32e5c41cd44238eda7b12a SHA-1: dfadffb59ce8da90aad47494a5b0258d79656568 SHA-256: 7aee41316281d6ab6805a1d7a97343f3b7c41fd0589c40dfc265948ade686d54
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded links, forming a link farm. The ML classifier also flagged this PDF as malicious. The primary attack pattern observed is the attempt to direct users to a wide array of external PDF documents, likely for SEO manipulation or to host malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9787

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/4738739734736731/Metric-Pattern-Cutting-for-Women-s-Wear-by-Winifred-Aldrich.pdf
    • http://cefasfese.4pu.com/7739735735730734/Women-s-Wear-of-the-1930-s-With-Complete-Patterns-by-Ruth-S-Countryman.pdf
    • http://cefasfese.4pu.com/8732731735731730/-1627-LACE-PATTERN-JUMPER-VINTAGE-KNITTING-PATTERN-by-Princess-of-Patterns.pdf
    • http://cefasfese.4pu.com/4731738731734735/Cutting-Cords-Cutting-Cords-1-by-Mickie-B-Ashling.pdf
    • http://cefasfese.4pu.com/1731737738736731737/Mach-s-Metric-by-D-W-Patterson.pdf
    • http://cefasfese.4pu.com/1733737736733736/Tales-of-the-Metric-System-by-Imraan-Coovadia.pdf
    • http://cefasfese.4pu.com/1731731733738731730/Prince-Metric-Timber-Ready-Reckoner-by-James-Stanley-Baker.pdf
    • http://cefasfese.4pu.com/3739734730734/Pink-Slips-by-Beth-Aldrich.pdf
    • http://cefasfese.4pu.com/3730734736739731/Gay-Life-Stories-by-Robert-Aldrich.pdf
    • http://cefasfese.4pu.com/1730730734735/Thrive-The-Third-Metric-to-Redefining-Success-and-Creating-a-Life-of-Well-Being-Wisdom-and-Wonder-by-Arianna-Huffington.pdf
    • http://cefasfese.4pu.com/2738739730739732/Spring-Came-On-Forever-by-Bess-Streeter-Aldrich.pdf
    • http://cefasfese.4pu.com/3735738731736738/A-Lantern-in-Her-Hand-by-Bess-Streeter-Aldrich.pdf
    • http://cefasfese.4pu.com/4734736735733736/Gay-Life-amp-Culture-A-World-History-by-Robert-Aldrich.pdf
    • http://cefasfese.4pu.com/4738730735730739/Journey-into-Christmas-and-Other-Stories-by-Bess-Streeter-Aldrich.pdf
    • http://cefasfese.4pu.com/9730737733736737/Das-Geheimnis-von-Inselort-by-Winifred-Well.pdf
    • http://cefasfese.4pu.com/1730735737730737739/Maori-by-Winifred-Bauer.pdf
    • http://cefasfese.4pu.com/5736731736734731/Mademoiselle-Olympe-Zabriski-and-Our-New-Neighbors-at-Ponkapog-by-Thomas-Bailey-Aldrich.pdf
    • http://cefasfese.4pu.com/2734739738738739/The-Borgia-Prince-by-Winifred-Elze.pdf
    • http://cefasfese.4pu.com/9735730734733736/Max-s-Wonderful-Delicatessen-by-Winifred-Madison.pdf
    • http://cefasfese.4pu.com/5730732737736738/A-Child-in-the-Forest-by-Winifred-Foley.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.