Malicious PDF — malware analysis report

Static analysis result for SHA-256 8a43694b3636e9a5…

MALICIOUS

PDF

20.5 KB Created: 2019-05-03 05:08:33 +01:00 Authoring application: mPDF 5.7
MD5: 179b14f9ab2c2130c4f2e84a5ee59807 SHA-1: c273bf4193d1829b6c7395d84f1e4a57cefcd22e SHA-256: 8a43694b3636e9a5ab8391579eb023d6ba2f37ec8f7ff8c7a7fb76c4fe75f6d9
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links, as indicated by the PDF_SEO_LINK_FARM heuristic. While most of these links point to benign book titles, the sheer volume and the ML_NYX_PDF_MALICIOUS classification suggest a malicious intent, possibly for SEO spam or to distribute malware. The embedded URLs are likely part of a link farm designed to manipulate search engine rankings or to serve as a distribution point for malicious payloads.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9924

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/7a00a01a07a01a00/Nita-Mehta-s-complete-Indian-vegetarian-cookbook-by-Nita-Mehta.pdf
    • http://muicuiu.dumb1.com/7a00a01a07a06a04/Nita-Mehta-S-Taste-Of-Delhi-by-Nita-Mehta.pdf
    • http://muicuiu.dumb1.com/7a00a01a07a01a04/Winning-on-Appeal-Better-Briefs-and-Oral-Argument-NITA-s-Practical-Guide-Series-NITA-practical-guide-series-by-Ruggero-J-Aldisert.pdf
    • http://muicuiu.dumb1.com/4a09a01a00a03/The-Wagonmaster-by-Nita-Wick.pdf
    • http://muicuiu.dumb1.com/7a00a01a07a05a00/The-Spy-s-Bride-The-Couriers-3-by-Nita-Abrams.pdf
    • http://muicuiu.dumb1.com/7a00a01a07a01a01/Pregnant-Nita-by-Haley-39-s-Comet.pdf
    • http://muicuiu.dumb1.com/7a00a01a07a01a07/The-New-Creative-Artist-by-Nita-Leland.pdf
    • http://muicuiu.dumb1.com/7a00a01a07a05a07/The-Exiles-The-Couriers-2-by-Nita-Abrams.pdf
    • http://muicuiu.dumb1.com/7a00a01a07a05a04/The-Spy-s-Kiss-The-Couriers-4-by-Nita-Abrams.pdf
    • http://muicuiu.dumb1.com/7a00a01a07a00a05/Battle-of-Beings-War-Child-1-by-Nita-Tarr.pdf
    • http://muicuiu.dumb1.com/7a00a01a07a01a05/The-Dare-Club-Nita-by-Laurie-Bradach.pdf
    • http://muicuiu.dumb1.com/2a04a04a05a01a02/A-Question-of-Honor-The-Couriers-1-by-Nita-Abrams.pdf
    • http://muicuiu.dumb1.com/8a03a07a00a09a06/Solving-Psychic-Attack-by-Nita-Hickok.pdf
    • http://muicuiu.dumb1.com/7a08a06a02a03a00/God-s-Paper-Boy-The-Scott-Nute-Story-by-Nita-DeBorde.pdf
    • http://muicuiu.dumb1.com/1a05a06a00a03a00/Seduction-of-the-Mind-a-Pilgrimage-of-Spirit-by-Nita-Goyal.pdf
    • http://muicuiu.dumb1.com/1a05a07a07a00a00/In-Our-Backyard-A-Christian-Perspective-on-Human-Trafficking-in-the-United-States-by-Nita-Belles.pdf
    • http://muicuiu.dumb1.com/1a01a08a03a06a09a04/Das-Triptychon-Von-Marie-Redonnet-ALS-Kritische-Gesellschaftsstudie-in-Der-Franzosischen-Gegenwartsliteratur-by-Marie-Mader.pdf
    • http://muicuiu.dumb1.com/5a04a06a00a08a04/The-Conversion-of-Marie-Alphonse-Ratisbonne-1842-by-Marie-Th-odore-Renouard-De-Bussierre.pdf
    • http://muicuiu.dumb1.com/8a03a02a05a08a00/Le-Milieu-Familial-de-Marie-Guyard-Marie-de-L-Incarnation-1599-1672-by-Jacques-Amirault.pdf
    • http://muicuiu.dumb1.com/6a04a02a07a05a03/Marie-Has-a-Party-La-F-te-de-Marie-The-Language-of-Food-Family-and-Friends-Le-Langage-de-la-Nourriture-de-la-Famille-Et-Des-Amis-by-Poppy-Archer.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.