PDF malware analysis — malicious · 90f2599cf97a46e6

MALICIOUS

PDF

70.7 KB Created: 2021-08-10 14:47:31 +03:00 Authoring application: wkhtmltopdf 0.12.5 (via Qt 5.11.3) First seen: 2021-10-07

MD5: 1c2667e71ff6efcb919c688559142da5 SHA-1: 922d3d2ed651fad99eec7e59bf4c5f19970c414a SHA-256: 90f2599cf97a46e6e56eed5684eb1592b75eddd40fbf9b7e840396b9cb7004b7

94 Risk Score

Malware Insights

MITRE ATT&CK

T1566.001 Spearphishing Attachment

The file was detected as malicious by ML classifiers and ClamAV, indicating a phishing or trojan threat. It contains embedded URLs pointing to other PDF files, suggesting a multi-stage download attack. The document body was unreadable, but the presence of multiple unknown URLs strongly suggests a phishing or malware distribution attempt.

Machine Learning

Nyx PDF Classifier malicious score 0.6147

Heuristics 3

ClamAV: Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Phishing.Trojan-d2528dad23a95d95-d2528dad23a95d95-10044376-0
External URI info PDF_URI

PDF contains an external URL action
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL https://apoiotelecom.com/imagens/img_fckeditor/file/69499740771.pdf In PDF document text
- http://www.pointcookelectrician.com.au/wp-content/plugins/formcraft/file-upload/server/content/files/160c9dd6b9ccc0---40799953889.pdfIn PDF document text
- https://baxsporthorses.nl/userfiles/file/2889588787.pdfIn PDF document text
- https://luxmarketing.agency/wp-content/plugins/super-forms/uploads/php/files/usndmm55umrs31u7sb4ja6sm2t/98882726951.pdfIn PDF document text
- http://animationcoach.com/userfiles/file/pegujadowowewadototewosa.pdfIn PDF document text
- https://feedproxy.google.com/~r/1eyvgo/aqOO/~3/DOqCt-cVA4I/uplcv?utm_term=the+book+of+st+cyprianPDF link annotation

Open this report in the interactive analyzer, or submit your own file for analysis.