Malicious PDF — malware analysis report

Static analysis result for SHA-256 87028a760f7aa232…

MALICIOUS

PDF

29.6 KB Created: 2019-04-30 02:06:30 +01:00 Authoring application: mPDF 5.7
MD5: 3f5e41938e7c0836bf517e58e82d3c11 SHA-1: 166a5b0f1f46aabd66a4748a0e1c4d923c7dfabb SHA-256: 87028a760f7aa232e753a95c31132c57337ac1326515872f37ee607204bb23af
100 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO manipulation or to distribute malicious content. While the document body is unreadable, the critical heuristic 'PDF_SEO_LINK_FARM' strongly indicates this malicious intent. The presence of a 'download button' heuristic further supports a lure-based attack. No scripts were extracted, and the document body was unreadable.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9689

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/2a07a07a09a05/Book-Book-Book-by-Deborah-Bruss.pdf
    • http://muicuiu.dumb1.com/7a03a04a03a06a07/2nd-Edition-Just-1-hour-Amazing-New-Zealand-Travelling-Book-Bring-this-book-to-travel-This-book-is-NEW-This-book-includes-7-important-expression-for-this-book-by-Takuji.pdf
    • http://muicuiu.dumb1.com/7a03a04a06a05a08/Edition-1nd-Just-1-hour-Amazing-Singapore-Travelling-Book-Bring-this-book-to-travel-This-book-is-NEW-This-book-includes-7-important-expression-for-this-book-by-Takuji-Ekawa.pdf
    • http://muicuiu.dumb1.com/7a03a04a06a06a00/2nd-Edition-Just-1-hour-Amazing-Saipan-Travelling-Book-Bring-this-book-to-travel-This-book-is-This-book-includes-7-important-expression-for-travelling-countries-with-this-book-by-Takuji-Ekawa.pdf
    • http://muicuiu.dumb1.com/7a03a04a03a07a02/NEW-Edition-Just-1-hour-Amazing-English-Travelling-Book-Bring-this-book-to-travel-This-book-is-NEW-This-book-includes-7-important-expression-for-travelling-Book-by-Takuji.pdf
    • http://muicuiu.dumb1.com/1a01a03a05a09a04/The-Myst-Reader-Three-Books-in-One-Volume-The-Book-of-Atrus-The-Book-of-Ti-ana-The-Book-of-D-ni-by-Rand-Miller.pdf
    • http://muicuiu.dumb1.com/7a08a03a08a03a01/Once-Upon-a-Fairytale-6x9-Notebook-Journal-Diary-Keepsake-Book-Sketchbook-Travel-Journal-Meditation-Journal-Yoga-Journal-Planner-Organizer-Calligraphy-Book-Composition-Book-100-Lined-Pages-with-Dates-by-Judy-Sery-Barski.pdf
    • http://muicuiu.dumb1.com/1a00a08a03a03a04a08/Shadow-of-Night-by-Deborah-Harkness-Unabridged-MP3-CD-Audiobook-All-Souls-Trilogy-Book-2-by-Deborah-Harkness.pdf
    • http://muicuiu.dumb1.com/1a08a05a00a03a04/The-Loud-Book-by-Deborah-Underwood.pdf
    • http://muicuiu.dumb1.com/2a05a05a08a02a09/Fate-s-Path-The-DestinySeries-Book-Two-by-Deborah-Ann.pdf
    • http://muicuiu.dumb1.com/1a09a08a07a04a07/Fate-s-Path-The-Destiny-Series-Book-Two-by-Deborah-Ann.pdf
    • http://muicuiu.dumb1.com/9a05a08a06/The-Book-of-Life-All-Souls-Trilogy-3-by-Deborah-Harkness.pdf
    • http://muicuiu.dumb1.com/1a03a03a03a00a01/The-Book-of-Life-All-Souls-Trilogy-3-by-Deborah-Harkness.pdf
    • http://muicuiu.dumb1.com/3a09a09a05a02a04/Modes-of-Transportation-ABC-Book-of-Rhymes-Children-s-Picture-Book-by-Yael-Rosenberg.pdf
    • http://muicuiu.dumb1.com/5a08a02a07a05a07/Book-One-Bartolome-de-Las-Casas-Book-One-for-Demonizing-the-White-Race-by-Jerry-Henrie.pdf
    • http://muicuiu.dumb1.com/5a06a05a02a03a03/The-Book-of-Questions-Volume-II-IV-Yael-V-Elya-VI-Aely-VII-El-Or-the-Last-Book-by-Edmond-Jab-s.pdf
    • http://muicuiu.dumb1.com/1a01a07a00a02a00a03/Sports-Illustrated-Kids-My-First-Book-of-Football-A-Rookie-Book-by-Beth-Bugler.pdf
    • http://muicuiu.dumb1.com/3a06a07a02a07a02/Dear-Sir-I-Intend-to-Burn-Your-Book-An-Anatomy-of-a-Book-Burning-by-Lawrence-Hill.pdf
    • http://muicuiu.dumb1.com/1a01a00a03a04a04a03/The-Book-of-Revelation-A-Study-of-the-Last-Prophetic-Book-of-Holy-Scripture-by-Clarence-Larkin.pdf
    • http://muicuiu.dumb1.com/4a05a05a03a05a00/A-Witch-s-Guide-to-Familiars-A-Book-amp-Candle-Mystery-Book-5-by-Aubrey-Harper.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.