Malicious PDF — malware analysis report

Static analysis result for SHA-256 86d46797700da16e…

MALICIOUS

PDF

16.9 KB Created: 2019-05-09 02:07:52 +01:00 Authoring application: mPDF 5.7
MD5: 6e2959a7fabd449745cb84712ecef6d0 SHA-1: 0396dc912cc48a81ee72445a90d34ab1fe5a2a79 SHA-256: 86d46797700da16e9eaeb3d9590792bb856e1194592e5f50b642fd5675e3aee5
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF documents, a technique often used for SEO manipulation or to host malicious content. The ML classifier also flagged this PDF as malicious. While the specific intent beyond hosting a link farm is unclear, the sheer volume of links suggests a malicious purpose, potentially to distribute further malware or phishing content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9787

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/4a09a09a00a04a04/Miles-from-Nowhere-Roadside-Assistance-3-by-Amy-Clipston.pdf
    • http://muicuiu.dumb1.com/6a09a09a06a00a05/Why-Stop-Texas-Roadside-Markers-A-Guide-to-Texas-Historical-Roadside-Markers-5th-Edition-by-Betty-Dooley-Awbrey.pdf
    • http://muicuiu.dumb1.com/2a06a07a05a04a00/High-Endeavours-The-Extraordinary-Life-and-Adventures-of-Miles-and-Beryl-Smeeton-by-Miles-Clark.pdf
    • http://muicuiu.dumb1.com/9a03a04a02/A-Seat-by-the-Hearth-by-Amy-Clipston.pdf
    • http://muicuiu.dumb1.com/4a09a00a05a08a02/A-Plain-and-Simple-Christmas-by-Amy-Clipston.pdf
    • http://muicuiu.dumb1.com/2a03a03a07a09a03/The-Cherished-Quilt-Amish-Heirloom-3-by-Amy-Clipston.pdf
    • http://muicuiu.dumb1.com/2a01a01a09a03a01/900-Miles-900-Miles-1-by-S-Johnathan-Davis.pdf
    • http://muicuiu.dumb1.com/3a02a03a02a04a04/The-Beloved-Hope-Chest-Amish-Heirloom-4-by-Amy-Clipston.pdf
    • http://muicuiu.dumb1.com/4a02a01a04a08a07/Expert-Assistance-by-Robert-Collins.pdf
    • http://muicuiu.dumb1.com/1a08a03a08a04a09/Expert-Assistance-by-Robert-Collins.pdf
    • http://muicuiu.dumb1.com/2a00a01a01a03/A-Hopeful-Heart-Hearts-of-Lancaster-Grand-Hotel-1-by-Amy-Clipston.pdf
    • http://muicuiu.dumb1.com/3a08a00a00a01a01/Another-Roadside-Attraction-by-Tom-Robbins.pdf
    • http://muicuiu.dumb1.com/2a07a06a00a04a06/Roadside-Picnic-by-Arkady-Strugatsky.pdf
    • http://muicuiu.dumb1.com/1a09a01a04a08a08/Roadside-Picnic-by-Arkady-Strugatsky.pdf
    • http://muicuiu.dumb1.com/1a00a01a03a08a06/The-Book-of-Assistance-by------.pdf
    • http://muicuiu.dumb1.com/2a07a06a03a00a00/Number-Sequences-and-their-Messages-Unravel-your-Divine-Assistance-by-Amelia-Bert.pdf
    • http://muicuiu.dumb1.com/1a02a08a00a01a08/The-Roadside-Rescue-Pepper-and-Longstreet-3-by-J-T-Lewis.pdf
    • http://muicuiu.dumb1.com/1a00a03a07a03a02a05/California-Crazy-and-Beyond-Roadside-Vernacular-Architecture-by-Jim-Heimann.pdf
    • http://muicuiu.dumb1.com/2a09a06a03a08a08/Will-Work-For-Food-Or-A-Memoir-From-The-Roadside-by-Bruce-Moody.pdf
    • http://muicuiu.dumb1.com/1a00a03a07a03a06a03/California-Crazy-Roadside-Vernacular-Architecture-by-J-Heimann.pdf
    • http://muicuiu.dumb1.com/4a02a01a04a08a

Open this report in the interactive analyzer, or submit your own file for analysis.