Malicious PDF — malware analysis report

Static analysis result for SHA-256 93f3eb9569711272…

MALICIOUS

PDF

25.3 KB Created: 2019-05-01 17:15:58 +01:00 Authoring application: mPDF 5.7
MD5: e907d734ee7eb5a7768e9b51d0d3ea00 SHA-1: e306a197e322d1b7507ffd03fa36ecba20635474 SHA-256: 93f3eb9569711272b51ad7c2f75a54d96282b2383792c0dbc24ecf993dd14e2f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of external links, characteristic of a link farm or SEO manipulation tactic. While no scripts were extracted, the PDF structure and embedded URLs suggest a delivery mechanism for potentially malicious content or a phishing attempt disguised as legitimate documents.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9910

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/7201206203209/Le-Comte-De-Monte-Cristo-3-The-Count-of-Monte-Cristo-part-3-of-3-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/6207202206205208/The-Count-of-Monte-Cristo-Volume-II-The-Count-of-Monte-Cristo-2-of-2-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/1200209208200205207/The-Count-of-Monte-Cristo-By-Alexandre-Dumas---Rank-30-Of-100-100-Formatted-Wordwise-Enabled-Active-TOC-Active-Footnotes-Illustrated--JKL-Classics-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/8203200200200209/The-Count-of-Monte-Cristo-In-Half-the-Time-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/9201201203200205/The-Count-of-Monte-Cristo-100-Copy-Limited-Edition-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/8205204205201207/The-Count-of-Monte-Cristo-Illustrated-A-Tale-of-Adventure-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/8201207200209202/The-Count-of-Monte-Cristo-Annotated-with-short-biography-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/6202203201207205/The-Count-Of-Monte-Cristo-Shandon-Classics-The-Books-You-Must-Read-Before-You-Die---6-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/1201208207200203206/The-Count-of-Monte-Cristo-Abridged-Edition-Dover-Books-on-Literature-amp-Drama-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/5203201202206205/The-Count-of-Monte-Cristo-Audiobook-Twenty-Thousand-Leagues-Under-the-Sea-The-Moonstone-The-Prince-and-the-Pauper-Ivanhoe-amp-Alice-s-Adventures-in-Wonderland-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/5208206208208209/THE-COUNT-OF-MONTE-CRISTO-With-Original-Illustrations-Historical-Adventure-Classic-from-the-renowned-French-writer-known-for-The-Three-Musketeers-Reine-Margot-and-The-Man-in-the-Iron-Mask-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/6200205201204201/Le-comte-de-Monte-Cristo-dition-int-grale-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/4205206207203/Le-Comte-de-Monte-Cristo-I-Le-Comte-de-Monte-Cristo-1-of-2-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/5204207204206202/Contele-de-Monte-Cristo-Contele-de-Monte-Cristo-1-of-4-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/2201204206204/The-Black-Count-Glory-Revolution-Betrayal-and-the-Real-Count-of-Monte-Cristo-by-Tom-Reiss.pdf
    • http://xiixmcuin.linkpc.net/4202209204203203/The-Count-of-Monte-Cristo-as-Retold-by-Sherlock-Holmes-by-Holy-Ghost-Writer.pdf
    • http://xiixmcuin.linkpc.net/9208205201209206/The-Three-Musketeers-by-Alexandre-Dumas-Illustrated-Delphi-Parts-Edition-Alexandre-Dumas-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/5202200208207/The-Count-of-Montecristo-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/6203203207203202/The-Three-Musketeers-Inti-Classics-annotated-by-Alexandre-Dumas-p-re-by-Alexandre-Dumas.pdf
    • http://xiixmcuin.linkpc.net/6207202206205207/The-Lost-World-By-Arthur-Conan-Doyle-Illustrated-FREE-The-Count-Of-Monte-Cristo-by-Arthur-Conan-Doyle.pdf
    • http://xiixmcuin.linkpc.net/8201207200209202/The-Count-of-Mo

Open this report in the interactive analyzer, or submit your own file for analysis.