Malicious PDF — malware analysis report

Static analysis result for SHA-256 94ff68b6f70b9665…

MALICIOUS

PDF

31.4 KB Created: 2019-04-29 23:00:38 +01:00 Authoring application: mPDF 5.7
MD5: ef4a1a0a0f7590d09598204d8a61387d SHA-1: 7ffe840392728771601fd4f106ff63ae78584a7c SHA-256: 94ff68b6f70b9665d7af783c3f67503553e32928cd0599055acd50ad72e58243
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded links to external PDF documents, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this file as malicious with high confidence. The primary attack pattern appears to be a link farm designed to direct users to potentially malicious content hosted on the unieoooq.linkpc.net domain.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9904

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://unieoooq.linkpc.net/14e14e84e84e34e54e5/Verhandlungen-Des-Vereins-F-R-Kunst-Und-Alterthum-in-Ulm-Und-Oberschwaben-Unter-Dem-Protektorate-Sr-K-Niglichen-Hoheit-Des-Kronprinzen-Karl-Von-W-Rt-by-Verein-F-R-Kunst-Und-Altertum-in-Ulm-U.pdf
    • http://unieoooq.linkpc.net/14e14e84e84e34e54e1/Verhandlungen-Des-Vereins-F-R-Kunst-Und-Alterthum-in-Ulm-Und-Oberschwaben-Unter-Dem-Protektorate-Sr-K-Niglichen-Hoheit-Des-Kronprinzen-Karl-Von-W-Rt-by-Verein-F-R-Kunst-Und-Altertum-in-Ulm-U.pdf
    • http://unieoooq.linkpc.net/14e14e84e84e44e94e5/Die-Osterreichisch-Ungarische-Monarchie-in-Wort-Und-Bild-Auf-Anregung-Und-Unter-Mitwirkung-Weiland-Seiner-Kaiserl-Und-Konigl-Hoheit-Des-Durchlauchtigsten-Kronprinzen-Erzherzog-Rudolf-Begonnen-by-Unknown.pdf
    • http://unieoooq.linkpc.net/14e04e54e84e14e74e7/sch-ner-kochen---Die-Kunst-des-perfekten-Gratinierens-Die-Kunst-der-perfekten-Zubereitung-Rezepte-und-Tipps-by-Achim-Schwekendiek.pdf
    • http://unieoooq.linkpc.net/14e04e84e34e04e24e5/Kultur-Aachen-Architektur-Aachen-Archivar-Aachen-Brunnen-in-Aachen-Kunst-Aachen-Museum-in-Aachen-Musik-Aachen-Verein-by-Quelle-Wikipedia.pdf
    • http://unieoooq.linkpc.net/14e04e54e54e24e94e2/Die-Deutschstunde-von-Siegfried-Lenz-und-ihre-bersetzerische-Behandlung-im-Translat-von-Jes-s-Ruiz-unter-besonderer-Ber-cksichtigung-der-Aspekte-Kunst-und-Landschaft-by-Vicente-Berezo.pdf
    • http://unieoooq.linkpc.net/94e44e74e94e94e6/Amerikanische-Kunst-Von-1945-Bis-Heute-Kunst-D-USA-in-Europaischen-Sammlungen-Katalog-Zu-D-Ausstellungen-quot-New-York-in-Europa-quot-Nationalgalerie-Berlin-U-quot-Amerikan-Druckgrafik-Aus-Offentl-Sammlungen-D-Bundesrepublik-Deutschland-quot-Kunsthalle-Zu-by-Dieter-Honisch.pdf
    • http://unieoooq.linkpc.net/14e04e54e54e64e94e4/Museum-Moderner-Kunst-Passau-Stiftung-Worlen-Baudokumentation-Hausgeschichte-by-Museum-Moderner-Kunst-Passau.pdf
    • http://unieoooq.linkpc.net/94e44e04e54e94e5/Mannheim-in-Sage-Und-Geschichte-Im-Auftrag-Des-Mannheimer-Diesterweg-Vereins-Verfasst-Von-Seinem-Mitgliede-Festgabe-Zur-Feier-Des-Dreihundertj-hrigen-Bestehens-Der-Stadt-Dargereicht-Von-Dem-Mannheimer-Diesterweg-Verein-Volkst-mliche-Erz-hlungen-by-Gustav-Wiederkehr.pdf
    • http://unieoooq.linkpc.net/14e14e14e84e94e34e0/Mis-on-kunst-by-Leo-Tolstoy.pdf
    • http://unieoooq.linkpc.net/94e24e74e84e54e9/Denken-over-Kunst-by-A-A-Van-den-Braembussche.pdf
    • http://unieoooq.linkpc.net/14e04e34e24e94e94e0/Kunst-in-30-Sekunden-by-Lee-Beard.pdf
    • http://unieoooq.linkpc.net/94e04e64e74e34e1/Zen-in-der-Kunst-des-Bogenschie-ens-by-Eugen-Herrigel.pdf
    • http://unieoooq.linkpc.net/94e34e04e14e34e0/Spannungsfeld-Kunst-by-Bernhard-Hanel.pdf
    • http://unieoooq.linkpc.net/14e74e64e84e44e9/De-kunst-van-het-rijden-in-de-regen-by-Garth-Stein.pdf
    • http://unieoooq.linkpc.net/14e14e84e94e04e74e5/Der-Weg-der-leeren-Hand-Zen-in-der-Kunst-des-Kampfes-by-Joe-Hyams.pdf
    • http://unieoooq.linkpc.net/64e44e34e44e14e9/De-Kunst-Van-Het-Geluk-Over-de-zin-van-het-leven-by-Dalai-Lama-XIV.pdf
    • http://unieoooq.linkpc.net/14e14e84e94e04e74e4/Zen-in-der-Kunst-des-kampflosen-Kampfes-by-Takuan-Soho.pdf
    • http://unieoooq.linkpc.net/94e24e74e74e54e0/Die-Kunst-des-klugen-Fragens-by-Warren-Berger.pdf
    • http://unieoooq.linkpc.net/14e14e74e84e54e54e6/Die-Landschaft-in-Der-Nordischen-Kunst-by-Josef-Strzygowski.pdf
    • http://unieoooq.linkpc.net/14e14e84e84e44e94e5/Die-Osterreichisch-Ungarische-Monarchie-in-Wort-Und-Bild-Auf-Anregung-Und-Unter-Mitwirkung-Weiland-Seiner-Kaiserl-Und-

Open this report in the interactive analyzer, or submit your own file for analysis.