Malicious PDF — malware analysis report

Static analysis result for SHA-256 834b7f4716d91caa…

MALICIOUS

PDF

28.8 KB Created: 2019-04-30 07:06:46 +01:00 Authoring application: mPDF 5.7
MD5: b460810ffa77e64f704d6460e803e8a7 SHA-1: b2918850db648e93b00ae39f1725941b550c796b SHA-256: 834b7f4716d91caabed4fcecd2a76040470be3b2a300df8f9f81c350e0765ecf
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Phishing:Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a link farm with 31 external links, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML_NYX_PDF_MALICIOUS heuristic also flagged the document with high confidence. The embedded URLs, while individually marked as benign, collectively form a pattern of malicious activity designed to redirect users to numerous external sites. The document body contains these URLs, suggesting a lure to visit these external resources.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://unieoooq.linkpc.net/14e04e44e54e54e14e4/Parody-As-Interpretative-Response-To-Grimms-Kinder-Und-Hausm-rchen-by-Craig-Monk.pdf
    • http://unieoooq.linkpc.net/84e74e84e44e64e4/Der-Wolf-und-die-sieben-Gei-lein-Grimms-M-rchen-f-r-Kinder-zum-Lesen-und-Vorlesen-by-Wolfgang-Looskyll.pdf
    • http://unieoooq.linkpc.net/94e44e54e64e64e8/Ungl-ckliche-Kinder---was-machen-wir-blo-falsch-Von-berbeh-tung-ber-falsche-Ern-hrung-bis-Mobbing-Aufstand-der-Kinder---So-misslingt-die-Erziehung-unserer-Kinder-garantiert-by-Dantse-Dantse.pdf
    • http://unieoooq.linkpc.net/94e44e54e64e64e7/Ungluckliche-Kinder---Noch-Mehr-Dinge-Die-Wir-Falsch-Machen-Konnen-Von-Angsten-Uber-Urvertrauen-Bis-Pubertat-Aufstand-Der-Kinder---So-Misslingt-Die-Erziehung-Unserer-Kinder-Garantiert-by-Dantse-Dantse.pdf
    • http://unieoooq.linkpc.net/64e64e44e14e44e0/Maze-Runner-Parody---The-Dazed-Runner-by-Parody-Brothers.pdf
    • http://unieoooq.linkpc.net/44e54e24e34e84e6/Mr-Monk-in-Outer-Space-Mr-Monk-5-by-Lee-Goldberg.pdf
    • http://unieoooq.linkpc.net/14e14e54e24e64e54e2/Mr-Monk-Is-Open-For-Business-Mr-Monk-18-by-Hy-Conrad.pdf
    • http://unieoooq.linkpc.net/14e14e74e84e84e34e7/Die-Kinder-aus-Nr-67-Band-3-Die-Kinder-auf-der-Insel-Mirjam-in-Amerika-by-Lisa-Tetzner.pdf
    • http://unieoooq.linkpc.net/94e14e74e84e44e0/Kinder-verstehen-Born-to-be-wild-Wie-die-Evolution-unsere-Kinder-pr-gt-by-Herbert-Renz-Polster.pdf
    • http://unieoooq.linkpc.net/94e44e24e64e24e7/Die-Elfe-Morgentau---Einschlafgeschichten-f-r-Kinder-mit-eingewebten-Entspannungs-bungen-Spannende-Entspannung-f-r-Kinder-by-Christiane-Heyn.pdf
    • http://unieoooq.linkpc.net/14e04e94e64e74e14e3/Das-Spannungsverh-ltnis-zwischen-Kinder--und-Jugendhilfe-und-Kinder--und-Jugendpsychiatrie-Bef-higung-als-Handlungsorientierung-in-der-Sozialen-Arbeit-belasteten-jungen-Menschen-by-Michael-Tetzer.pdf
    • http://unieoooq.linkpc.net/14e04e94e84e44e54e8/Die-Haushaltung-Gottes-Vol-2-Enthaltend-Die-Fortie-ung-Der-Urgefchichte-Der-Menfchheit-in-Den-F-hrungen-Der-Uw-ter-Fowohl-Der-Kinder-Der-H-he-ALS-Auch-Der-Kinder-Der-Tiefe-Kabine-Nachkommen-by-Jakob-Lorber.pdf
    • http://unieoooq.linkpc.net/34e84e24e54e44e4/New-Rules-of-Sociological-Method-A-Positive-Critique-of-Interpretative-Sociologies-by-Anthony-Giddens.pdf
    • http://unieoooq.linkpc.net/44e54e24e34e84e7/Mr-Monk-and-The-Two-Assistants-Mr-Monk-4-by-Lee-Goldberg.pdf
    • http://unieoooq.linkpc.net/94e84e44e14e94e9/Mr-Monk-is-a-Mess-Mr-Monk-14-by-Lee-Goldberg.pdf
    • http://unieoooq.linkpc.net/44e14e74e74e74e8/Mr-Monk-on-the-Road-Mr-Monk-11-by-Lee-Goldberg.pdf
    • http://unieoooq.linkpc.net/14e14e54e24e64e44e7/Mr-Monk-Helps-Himself-Mr-Monk-16-by-Hy-Conrad.pdf
    • http://unieoooq.linkpc.net/54e94e54e34e9/Mr-Monk-is-Miserable-Mr-Monk-7-by-Lee-Goldberg.pdf
    • http://unieoooq.linkpc.net/14e14e94e44e84e04e5/Kinderb-cher-Abenteuer-von-kleinen-Fischen-IN-DER-SUCHE-EINES-FREUNDES-Bilderb-cher-kinder-Leseanf-nger-deutsch-kinder-buch-Schlafenszeit-Gutenachtgeschichten-German-edition-by-Anna-Smith.pdf
    • http://unieoooq.linkpc.net/14e14e44e44e14e74e9/Die-Dualistische-Realit-t-Und-Die-Evokation-Des-Wunderbaren-in-E-T-A-Hoffmanns-M-rchen-Der-Goldne-Topf-Und-Meister-Floh-by-Sara-Anais-Wrede.pdf
    • http://unieoooq.linkpc.net/94e44e54e64e64e7/Ungluckliche-Kinder---Noch-Mehr-Dinge-Die-Wir-Falsch-Machen-Konnen-Von-Angsten-Uber-Urvertrauen-Bis-Pubertat-Aufstand-Der-Kinder---So-Misslingt-Die-Erziehung-Unserer-Kinder-Garantiert-by-Dant

Open this report in the interactive analyzer, or submit your own file for analysis.