Malicious PDF — malware analysis report

Static analysis result for SHA-256 7b67234a16b0fd7f…

MALICIOUS

PDF

13.8 KB Created: 2019-06-13 13:20:21 +01:00 Authoring application: mPDF 5.7
MD5: 966dc21b97f2f69025b6c11e3cea43e3 SHA-1: e14c42812bd5185b3fc92556e8bb216ed039c024 SHA-256: 7b67234a16b0fd7fc3d5ad9f2274a1fee51d6452b282802d0fa3d5563752197f
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. These links likely serve as a lure to direct users to malicious websites or to download further malware. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9798

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/7734731737736737/The-Cali-Boss-I-Fell-For-by-D-Nika.pdf
    • http://cefasfese.4pu.com/2735730735731733/Mob-Boss-Christmas-The-Pregnancy-Romancing-the-Mob-Boss-5-by-Mallory-Monroe.pdf
    • http://cefasfese.4pu.com/1731736738734735737/Secrets-of-the-Hanged-Man-Icarus-Fell-3-An-Icarus-Fell-Novel-by-Bruce-Blake.pdf
    • http://cefasfese.4pu.com/1734736730737730/The-Boss-The-Boss-1-by-Abigail-Barnette.pdf
    • http://cefasfese.4pu.com/1730737738739733731/Ausgel-scht-by-Nika-Nanashii.pdf
    • http://cefasfese.4pu.com/9735732738733733/Seele-in-Flammen-by-Nika-Hemoger.pdf
    • http://cefasfese.4pu.com/6735731734731731/Forbidden-Fruit-by-Nika-Michelle.pdf
    • http://cefasfese.4pu.com/6735731734737733/Forbidden-Fruit-2-by-Nika-Michelle.pdf
    • http://cefasfese.4pu.com/3734737730737734/Baggage-Claim-by-Nika-Yaya.pdf
    • http://cefasfese.4pu.com/2739739737731731/Omega-Outfoxed-by-Nika-Lucas.pdf
    • http://cefasfese.4pu.com/4737730738739730/Echoes-of-Old-Souls-by-Nika-Harper.pdf
    • http://cefasfese.4pu.com/1730734736734736732/Wortschatz-ben-by-Nika-Ragua.pdf
    • http://cefasfese.4pu.com/9735731730731732/Reawakening-Oath-Nika-series-2-by-K-D-Nelson.pdf
    • http://cefasfese.4pu.com/6735731736730733/Forbidden-Fruit-3-The-Juice-by-Nika-Michelle.pdf
    • http://cefasfese.4pu.com/5733737734731731/Bout-That-Life-Diablo-s-Story-by-Nika-Michelle.pdf
    • http://cefasfese.4pu.com/6733736739738731/Femininity-Image-in-Popular-Media-by-Fumic-Nika.pdf
    • http://cefasfese.4pu.com/2734739736737733/Romancing-the-Mob-Boss-Romancing-the-Mob-Boss-1-by-Mallory-Monroe.pdf
    • http://cefasfese.4pu.com/7734731738738731/I-Can-t-Wait-by-Davide-Cali.pdf
    • http://cefasfese.4pu.com/7734731739736738/I-Love-Chocolate-by-Davide-Cali.pdf
    • http://cefasfese.4pu.com/4731736734732737/Greyson---Part-4-by-Cali-MacKay.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.