Malicious PDF — malware analysis report

Static analysis result for SHA-256 9497d5e3fcbc7c14…

MALICIOUS

PDF

23.0 KB Created: 2019-04-30 01:41:19 +01:00 Authoring application: mPDF 5.7 First seen: 2021-08-20
MD5: b53c49ab39461152ee7b8773eb9d7a17 SHA-1: c5d9741a58a4675022169d559045b5caf5c6fe30 SHA-256: 9497d5e3fcbc7c144d5a556edff57ea2d52a9ee354961c4f1b48f26d47579dc3
100 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic, pointing to external PDF files. While many of these URLs were labeled as benign, the sheer volume and the heuristic's critical severity suggest a malicious intent, possibly to manipulate search engine rankings or distribute unwanted content. The ML_NYX_PDF_MALICIOUS classifier also flagged the document with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9901

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Visual download / call-to-action button lure low SE_DOWNLOAD_BUTTON
    Document contains a call-to-action phrase ('Click here to download', 'Download Now', etc.) — low-signal unless other findings point to a malicious workflow
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/2a06a06a05a03/The-Best-Science-Fiction-of-the-Year-1-by-Terry-Carr.pdf In PDF document text
    • http://muicuiu.dumb1.com/2a06a06a05a02/The-Best-Science-Fiction-of-the-Year-2-by-Terry-Carr.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a06a06a04a04/The-Best-Science-Fiction-of-the-Year-5-by-Terry-Carr.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a06a06a04a01/The-Best-Science-Fiction-of-the-Year-7-by-Terry-Carr.pdfIn PDF document text
    • http://muicuiu.dumb1.com/4a05a06a00a05a07/Science-Fiction-for-People-Who-Hate-Science-Fiction-by-Terry-Carr.pdfIn PDF document text
    • http://muicuiu.dumb1.com/7a07a07a01a03a03/The-Best-Science-Fiction-of-the-Year-Volume-One-The-Best-Science-Fiction-of-the-Year-1-by-Neil-Clarke.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a06a03a08a08a01/The-Best-of-the-Best-20-Years-of-the-Year-s-Best-Science-Fiction-by-Gardner-Dozois.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a06a06a02a04/The-Year-s-Best-Science-Fiction-First-Annual-Collection-by-Gardner-Dozois.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a06a05a02a05/The-Year-s-Best-Science-Fiction-Twenty-First-Annual-Collection-by-Gardner-Dozois.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a06a05a06a01/The-Year-s-Best-Science-Fiction-Fourteenth-Annual-Collection-by-Gardner-Dozois.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a06a06a08a06/The-Year-s-Best-Science-Fiction-Twenty-Ninth-Annual-Collection-by-Gardner-Dozois.pdfIn PDF document text
    • http://muicuiu.dumb1.com/3a03a07a07a05a00/The-Year-s-Best-Science-Fiction-Twenty-Fourth-Annual-Collection-by-Gardner-Dozois.pdfIn PDF document text
    • http://muicuiu.dumb1.com/3a04a05a03a00a07/Star-Wars-on-Trial-The-Force-Awakens-Edition-Science-Fiction-and-Fantasy-Writers-Debate-the-Most-Popular-Science-Fiction-Films-of-All-Time-by-David-Brin.pdfIn PDF document text
    • http://muicuiu.dumb1.com/1a01a01a02a05a02a05/Nebula-Awards-Showcase-2000-The-Year-s-Best-SF-and-Fantasy-Chosen-by-the-Science-Fiction-and-Fantasy-Writers-by-Gregory-Benford.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a04a08a09a04/Asimov-s-Science-Fiction-February-1999-Asimov-s-Science-Fiction-277-by-Gardner-Dozois.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a06a02a08a08/The-Magazine-of-Fantasy-amp-Science-Fiction-October-November-1992-The-Magazine-of-Fantasy-amp-Science-Fiction-497-498-by-Kristine-Kathryn-Rusch.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a04a06a00a00/The-Magazine-of-Fantasy-amp-Science-Fiction-October-1981-The-Magazine-of-Fantasy-amp-Science-Fiction-365-by-Edward-L-Ferman.pdfIn PDF document text
    • http://muicuiu.dumb1.com/9a04a06a01a02a07/The-Magazine-of-Fantasy-and-Science-Fiction-July-1955-The-Magazine-of-Fantasy-amp-Science-Fiction-50-by-Anthony-Boucher.pdfIn PDF document text
    • http://muicuiu.dumb1.com/2a09a00a06a01a06/Mindscapes-Ten-Science-Fiction-and-Speculative-Fiction-Short-Stories-by-Victor-D-Lopez.pdfIn PDF document text
    • http://muicuiu.dumb1.com/4a04a07a02a05a09/Tomorrowland-Our-Staggering-Journey-from-Science-Fiction-to-Science-Fact-by-Steven-Kotler.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.