Malicious PDF — malware analysis report

Static analysis result for SHA-256 8f885215767d1675…

MALICIOUS

PDF

15.8 KB Created: 2019-04-30 03:34:45 +01:00 Authoring application: mPDF 5.7
MD5: 1d70758dbd102c66c1d129f52f323696 SHA-1: 0c35e9c5cf761c10045753d207a0079203565c81 SHA-256: 8f885215767d1675a734d3cac52980c3c1b1c8536ddb6753471c99bc41adfc0e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links to external websites, identified as a link farm. While most individual URLs were marked as benign, the sheer volume and the heuristic firing of PDF_SEO_LINK_FARM indicate a malicious intent, likely for SEO manipulation or to redirect users to malicious content. The ML classifier also strongly flagged this PDF as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9800

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/5a00a08a04a08a00/Gilda-Trillim-Shepherdess-of-Rats-by-Steven-L-Peck.pdf
    • http://muicuiu.dumb1.com/2a01a00a03a00a08/The-Scholar-of-Moab-by-Steven-L-Peck.pdf
    • http://muicuiu.dumb1.com/4a09a00a04a09a08/Peck-Peck-Peck-by-Lucy-Cousins.pdf
    • http://muicuiu.dumb1.com/3a01a04a05a09a02/Gilda-Joyce-The-Ladies-of-the-Lake-Gilda-Joyce-2-by-Jennifer-Allison.pdf
    • http://muicuiu.dumb1.com/3a01a04a05a07a04/Gilda-Joyce-The-Ghost-Sonata-Gilda-Joyce-3-by-Jennifer-Allison.pdf
    • http://muicuiu.dumb1.com/8a06a06a04a01/Oh-Rats-The-Story-of-Rats-and-People-by-Albert-Marrin.pdf
    • http://muicuiu.dumb1.com/1a06a03a03a06a02/The-Yorkshire-Shepherdess-by-Amanda-Owen.pdf
    • http://muicuiu.dumb1.com/4a08a04a03a00a00/The-Shepherdess-of-Siena-by-Linda-Lafferty.pdf
    • http://muicuiu.dumb1.com/5a09a08a03a04a03/Marina-The-Virgin-Shepherdess-by-Lori-Penn.pdf
    • http://muicuiu.dumb1.com/4a05a07a04a02/Shepherdess-Notes-from-the-Field-by-Joan-Jarvis-Ellison.pdf
    • http://muicuiu.dumb1.com/6a07a00a05a05/It-s-Always-Something-by-Gilda-Radner.pdf
    • http://muicuiu.dumb1.com/3a00a03a03a08a04/It-s-Always-Something-by-Gilda-Radner.pdf
    • http://muicuiu.dumb1.com/1a09a02a04a08/The-Gilda-Stories-by-Jewelle-L-G-mez.pdf
    • http://muicuiu.dumb1.com/8a01a06a02a04a05/Gilda-s-Gloriously-Grandiose-Grievous-Grudge-by-Ri2.pdf
    • http://muicuiu.dumb1.com/6a05a07a04a00/The-Last-Full-Moon-Lessons-of-my-Life-by-Gilda-Cordero-Fernando.pdf
    • http://muicuiu.dumb1.com/3a05a03a06a08a03/Death-of-a-Jaded-Samurai-Gilda-Wright-Mysteries-1-by-Diane-Bator.pdf
    • http://muicuiu.dumb1.com/4a03a08a04a05a06/What-Really-Killed-Gilda-Radner-Frontline-Reports-on-the-Chronic-Fatigue-Syndrome-Epidemic-by-Neenyah-Ostrom.pdf
    • http://muicuiu.dumb1.com/1a01a05a01a02a05a02/Something-for-Joey-by-Richard-E-Peck.pdf
    • http://muicuiu.dumb1.com/1a09a07a07a06/Law-of-Enclosures-by-Dale-Peck.pdf
    • http://muicuiu.dumb1.com/4a00a04a03a02a05/Bunny-Bunny-Gilda-Radner-A-Sort-of-Love-Story-by-Alan-Zweibel.pdf
    • http://muicuiu.dumb1.com/3a00a03a03a08a04/It-s-Always-Something-by-Gilda-Radne

Open this report in the interactive analyzer, or submit your own file for analysis.