Malicious PDF — malware analysis report

Static analysis result for SHA-256 90f71f7ed5ff8182…

MALICIOUS

PDF

25.8 KB Created: 2019-05-01 18:19:46 +01:00 Authoring application: mPDF 5.7
MD5: 2c9ef047f0caf88494bc87d37f4d3040 SHA-1: ab068e199b5172a4a1252a35e084db50b6b81176 SHA-256: 90f71f7ed5ff8182bdca10e7cdea4d369821e6d2c5ac523fac17414a63e7e0eb
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded links to external PDF files, as indicated by the PDF_SEO_LINK_FARM heuristic. While the document body is heavily obfuscated, the presence of numerous URLs suggests a link farm or redirection scheme. The ML_NYX_PDF_MALICIOUS heuristic further supports the malicious nature of the file. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9742

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://seasasac.lflinkup.c
    • http://seasasac.lflinkup.com/2da6da5da5da1/Far-Horizons-All-New-Tales-from-the-Greatest-Worlds-of-Science-Fiction-by-Robert-Silverberg.pdf
    • http://seasasac.lflinkup.com/3da6da7da1da0da5/Worlds-Of-Maybe-Seven-Stories-Of-Science-Fiction-by-Robert-Silverberg.pdf
    • http://seasasac.lflinkup.com/6da9da6da4da2da6/Robert-Silverberg-Presents-the-Great-Science-Fiction-Stories-by-Robert-Silverberg.pdf
    • http://seasasac.lflinkup.com/7da4da4da6da2/The-Science-Fiction-Hall-of-Fame-Volume-Two-B-The-Greatest-Science-Fiction-Novellas-of-All-Time-Chosen-by-the-Members-of-the-Science-Fiction-Writers-of-America-by-Ben-Bova.pdf
    • http://seasasac.lflinkup.com/1da6da4da0da5da9/The-Calibrated-Alligator-and-Other-Science-Fiction-Stories-by-Robert-Silverberg.pdf
    • http://seasasac.lflinkup.com/1da6da3da1da8da6/Great-Science-Fiction-of-the-20th-Century-by-Robert-Silverberg.pdf
    • http://seasasac.lflinkup.com/6da9da6da4da3da2/Space-Odyssey-an-Anthology-of-Great-Science-Fiction-Stories-by-Robert-Silverberg.pdf
    • http://seasasac.lflinkup.com/9da4da5da5da5da2/Science-Fiction-Hall-of-Fame-1-Die-besten-Storys-1934-1948-by-Robert-Silverberg.pdf
    • http://seasasac.lflinkup.com/7da2da2da9da7/The-Monsters-and-Other-Science-Fiction-Tales-by-Robert-Sheckley.pdf
    • http://seasasac.lflinkup.com/2da2da1da2da3da8/In-Other-Worlds-Science-Fiction-and-the-Human-Imagination-by-Margaret-Atwood.pdf
    • http://seasasac.lflinkup.com/3da7da0da2da6da1/Worlds-Apart-An-anthology-of-lesbian-and-gay-science-fiction-and-fantasy-by-Camilla-Decarnin.pdf
    • http://seasasac.lflinkup.com/4da2da9da5da7da9/The-Collected-Stories-of-Robert-Silverberg-Volume-3-Something-Wild-is-Loose-1969-72-by-Robert-Silverberg.pdf
    • http://seasasac.lflinkup.com/4da2da9da5da6da1/The-Collected-Stories-of-Robert-Silverberg-Volume-2-To-the-Dark-Star-1962-69-by-Robert-Silverberg.pdf
    • http://seasasac.lflinkup.com/9da5da8da5da6da0/Why-Should-I-Cut-Your-Throat-Excursions-Into-the-Worlds-of-Science-Fiction-Fantasy-amp-Horror-by-Jeff-VanderMeer.pdf
    • http://seasasac.lflinkup.com/4da2da9da5da6da5/The-Collected-Stories-Of-Robert-Silverberg-Volume-Five-The-Palace-At-Midnight-by-Robert-Silverberg.pdf
    • http://seasasac.lflinkup.com/4da8da6da1da3da6/In-the-Beginning-Tales-from-the-Pulp-Era-by-Robert-Silverberg.pdf
    • http://seasasac.lflinkup.com/1da4da1da8da9da1/Worlds-Enough-amp-Time-Five-Tales-of-Speculative-Fiction-by-Dan-Simmons.pdf
    • http://seasasac.lflinkup.com/4da4da5da9da2da5/The-Mammoth-Book-of-Golden-Age-Science-Fiction-Ten-Classic-Stories-from-the-Birth-of-Modern-Science-Fiction-Writing-by-Isaac-Asimov.pdf
    • http://seasasac.lflinkup.com/4da5da7da1da9da9/Science-Fiction-by-Gaslight-A-History-and-Anthology-of-Science-Fiction-in-the-Popular-Magazines-1891-1911-by-Sam-Moskowitz.pdf
    • http://seasasac.lflinkup.com/3da4da5da3da0da7/Star-Wars-on-Trial-The-Force-Awakens-Edition-Science-Fiction-and-Fantasy-Writers-Debate-the-Most-Popular-Science-Fiction-Films-of-All-Time-by-David-Brin.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.