Malicious PDF — malware analysis report

Static analysis result for SHA-256 92d783d4ad4778a4…

MALICIOUS

PDF

15.0 KB Created: 2019-11-07 21:40:41 +00:00 Authoring application: mPDF 5.7
MD5: 4aee39034917025085afb1462b38cfb4 SHA-1: cef768d56562355619244e52b0783588eb979f37 SHA-256: 92d783d4ad4778a4aa96b149b27df0dd1d232048988ba5b9d57e48b6173d9380
60 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to PDFs hosted on the domain 'cefasfese.4pu.com'. This is indicative of a link farm or a lure to a malicious site, likely for SEO poisoning or to host further malicious content. No scripts were extracted, and the document body was unreadable, limiting the analysis of the exact user-facing lure.

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/1734739733731738/Naguib-Mahfouz-Three-Novels-of-Ancient-Egypt-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/2738730737732736/Thebes-at-War-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/2733736739731735/Miramar-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/1738737734735730/Sugar-Street-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/3732737733738737/Khufu-s-Wisdom-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/1735731735731733/Teba-n-r-zboi-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/7738732731737/Midaq-Alley-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/5730732736738733/Children-of-Gebelawi-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/9731734733730732/The-Cairo-of-Naguib-Mahfouz-by-Britta-Le-Va.pdf
    • http://cefasfese.4pu.com/8736731734734/The-Thief-and-the-Dogs-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/1736739730738738/Arabian-Nights-and-Days-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/1738733730736733/Midaq-Alley-A-New-Translation-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/1734739739734736/Akhenaten-Dweller-in-Truth-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/1738737734739737/Voices-from-the-Other-World-Ancient-Egyptian-Tales-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/4730738731736739/Three-Novels-of-Ancient-Egypt-Khufu-s-Wisdom-Rhadopis-of-Nubia-Thebes-at-War-by-Naguib-Mahfouz.pdf
    • http://cefasfese.4pu.com/3731730732739738/The-Journey-of-Peter-McCall-Wayward-Pines-The-Journey-1-by-Mark-Len-Mayfield.pdf
    • http://cefasfese.4pu.com/5730731734738738/Abigail-s-Journey-A-Sequel-to-Journey-of-the-Heart-by-Judith-Bronte.pdf
    • http://cefasfese.4pu.com/2738736738736738/Journey-to-the-Center-of-the-Heart-Journey-of-Discovery-1-by-A-M-Snead.pdf
    • http://cefasfese.4pu.com/9734739734735732/A-Journey-of-Survival-a-Journey-of-Hope-by-Karen-McCarten.pdf
    • http://cefasfese.4pu.com/3737731739730736/Journey-into-Danger-Journey-Trilogy-1-by-Ali-Reynolds.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.