Malicious PDF — malware analysis report

Static analysis result for SHA-256 8993187aec7572f4…

MALICIOUS

PDF

25.3 KB Created: 2019-05-01 05:54:34 +01:00 Authoring application: mPDF 5.7
MD5: 5ad0f2c5235de35d61f20c292ec87c76 SHA-1: 44a4bbbb9df8122397022580491aefb4f3717d19 SHA-256: 8993187aec7572f403ba46abee6717c2734645c0aaa64935938c91c3134552ef
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file was flagged as malicious by an ML classifier and contains a large number of embedded links. The heuristic 'PDF_SEO_LINK_FARM' indicates that these links are likely part of a scheme to direct users to malicious content or phishing sites. No scripts were extracted from this sample, but the extensive link farm suggests a social engineering attack.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9773

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a01a07a03a08a01a08/-7-Shokugeki-no-Souma-7-Food-Wars-Shokugeki-no-Soma-7-by-Yuto-Tsukuda.pdf
    • http://muicuiu.dumb1.com/1a01a07a03a08a07a08/-11-Shokugeki-no-Souma-11-Food-Wars-Shokugeki-no-Soma-11-by-Yuto-Tsukuda.pdf
    • http://muicuiu.dumb1.com/1a01a07a03a09a07a07/-24-Shokugeki-no-Souma-24-Food-Wars-Shokugeki-no-Soma-24-by-Yuto-Tsukuda.pdf
    • http://muicuiu.dumb1.com/1a01a07a03a08a08a03/-15-Shokugeki-no-Souma-15-Food-Wars-Shokugeki-no-Soma-15-by-Yuto-Tsukuda.pdf
    • http://muicuiu.dumb1.com/1a01a07a04a01a08a08/-28-Shokugeki-no-Souma-28-Food-Wars-Shokugeki-no-Soma-28-by-Yuto-Tsukuda.pdf
    • http://muicuiu.dumb1.com/1a01a07a03a08a01a06/-6-Shokugeki-no-Souma-6-Food-Wars-Shokugeki-no-Soma-6-by-Yuto-Tsukuda.pdf
    • http://muicuiu.dumb1.com/1a01a07a03a08a07a05/-9-Shokugeki-no-Souma-9-Food-Wars-Shokugeki-no-Soma-9-by-Yuto-Tsukuda.pdf
    • http://muicuiu.dumb1.com/1a01a07a03a09a08a08/-23-Shokugeki-no-Souma-23-Food-Wars-Shokugeki-no-Soma-23-by-Yuto-Tsukuda.pdf
    • http://muicuiu.dumb1.com/1a01a07a04a02a00a01/-30-Shokugeki-no-Souma-30-Food-Wars-Shokugeki-no-Soma-30-by-Yuto-Tsukuda.pdf
    • http://muicuiu.dumb1.com/5a04a05a02a05a00/--la-carte-II-Shokugeki-no-Souma-la-carte-II-Amai-Kioku-Food-Wars-Shokugeki-no-Soma-la-carte-2-by-Michiko-Itou.pdf
    • http://muicuiu.dumb1.com/7a04a06a01a04a06/-L-toile----4-Shokugeki-no-Souma-L-toile-4-Food-Wars-Shokugeki-no-Soma-Etoile-4-by-Michiko-Itou.pdf
    • http://muicuiu.dumb1.com/7a04a06a01a00a01/-L-toile----3-Shokugeki-no-Souma-L-toile-3-Food-Wars-Shokugeki-no-Soma-Etoile-3-by-Michiko-Itou.pdf
    • http://muicuiu.dumb1.com/2a01a00a09a05a00/Food-Wars-Vol-1-by-Yuto-Tsukuda.pdf
    • http://muicuiu.dumb1.com/1a07a02a09a05a07/Making-Peace-With-the-Earth-Beyond-Land-Wars-And-Food-Wars-by-Vandana-Shiva.pdf
    • http://muicuiu.dumb1.com/4a01a06a03a05a05/Food-Fights-amp-Culture-Wars-A-Secret-History-of-Taste-by-Tom-Nealon.pdf
    • http://muicuiu.dumb1.com/9a00a01a00a03a04/Food-and-Nutrition-at-Risk-in-America-Food-Insecurity-Biotechnology-Food-Safety-and-Bioterrorism-by-Sari-Edelstein.pdf
    • http://muicuiu.dumb1.com/8a05a09a06a00a05/ryuugakukaramanandakiminitsutaetaijugonokoto-by-Itoyama-yuto.pdf
    • http://muicuiu.dumb1.com/6a06a02a08a07a02/Supervising-Food-Safety-Level-3-A-Text-for-Level-3-Food-Safety-Courses---A-Reference-for-Supervisors-and-Managers-in-Food-Safety-by-Richard-A-Sprenger.pdf
    • http://muicuiu.dumb1.com/7a01a07a04a00/The-Clone-Wars-Star-Wars-The-Clone-Wars-1-by-Karen-Traviss.pdf
    • http://muicuiu.dumb1.com/6a09a04a00a04/Food-and-the-City-Urban-Agriculture-and-the-New-Food-Revolution-by-Jennifer-Cockrall-King.pdf
    • http://muicuiu.dumb1.com/1a01a07a04a01a08a08/-28-Sho

Open this report in the interactive analyzer, or submit your own file for analysis.