Malicious PDF — malware analysis report

Static analysis result for SHA-256 9682803dfc05e04d…

MALICIOUS

PDF

16.7 KB Created: 2019-08-02 07:36:18 +01:00 Authoring application: mPDF 5.7 First seen: 2020-12-25
MD5: 523ed7a1e4d4c19648dde7663c405db9 SHA-1: cd327a9937f870dc16ffa90a5c8e83f5243f7ca5 SHA-256: 9682803dfc05e04ddc4e60af4778c02be368dd8d8cb235640b550e7309d639b9
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified as a link farm. The ML classifier also flagged this PDF as malicious. The primary attack pattern involves redirecting the user to a large number of external PDF documents, likely for SEO spam or to host further malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/1733735733734739/Shattered-Hart-The-Hart-Family-2-by-Ella-Fox.pdf In PDF document text
    • http://cefasfese.4pu.com/1733734734736733/Loving-Hart-The-Hart-Family-3-by-Ella-Fox.pdfIn PDF document text
    • http://cefasfese.4pu.com/4737731737735/Loving-Hart-The-Hart-Family-3-by-Ella-Fox.pdfIn PDF document text
    • http://cefasfese.4pu.com/2735730731734734/Finding-Hart-The-Hart-Family-6-by-Ella-Fox.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730733735737735732/Elias-Baby-by-Ella-Hart.pdfIn PDF document text
    • http://cefasfese.4pu.com/1737733737732730/Need-The-MacKenzie-Family-12-by-Liliana-Hart.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730738733734739730/Geile-Verd-chtige-Hart-Genommen---Good-Cop-Bad-Cop-beim-Nymphomanenverh-r-Hart-und-Lustvoll-genommen-32-by-Rainer-Segen.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731734732736737736/Geile-Azubine-Hart-Genommen---Nachsitzen-in-der-Berufsschule-Hart-und-Lustvoll-Genommen-56-by-Rainer-Segen.pdfIn PDF document text
    • http://cefasfese.4pu.com/1738736734739731/Hart-in-hart-by-D-sanne-van-Brederode.pdfIn PDF document text
    • http://cefasfese.4pu.com/4738739733739738/Change-of-Hart-Hart-1-by-M-E-Carter.pdfIn PDF document text
    • http://cefasfese.4pu.com/2738735731731732/Scorch-The-MacKenzie-Family-11-by-Liliana-Hart.pdfIn PDF document text
    • http://cefasfese.4pu.com/2730736735733730/Dane-The-MacKenzie-Family-1-by-Liliana-Hart.pdfIn PDF document text
    • http://cefasfese.4pu.com/2730732730739738/Cade-The-MacKenzie-Family-5-by-Liliana-Hart.pdfIn PDF document text
    • http://cefasfese.4pu.com/1734736739730733/Shadows-and-Silk-The-MacKenzie-Family-6-by-Liliana-Hart.pdfIn PDF document text
    • http://cefasfese.4pu.com/7737739739732734/Trouble-Maker-The-MacKenzie-Family-10-2-by-Liliana-Hart.pdfIn PDF document text
    • http://cefasfese.4pu.com/5732738734738733/Hometown-Hearts-Granger-Family-Ranch-7-by-Jillian-Hart.pdfIn PDF document text
    • http://cefasfese.4pu.com/6734733730735739/Sins-and-Scarlet-Lace-The-MacKenzie-Family-8-by-Liliana-Hart.pdfIn PDF document text
    • http://cefasfese.4pu.com/5732738734731730/The-Rancher-s-Promise-Granger-Family-Ranch-3-by-Jillian-Hart.pdfIn PDF document text
    • http://cefasfese.4pu.com/2734732734734733/On-Hart-s-Boardwalk-On-Dublin-Street-6-7-Hart-s-Boardwalk-2-5-by-Samantha-Young.pdfIn PDF document text
    • http://cefasfese.4pu.com/7737739738732734/The-MacKenzie-Family-Security-Series-The-MacKenzie-Family-6-8-by-Liliana-Hart.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.