Malicious PDF — malware analysis report

Static analysis result for SHA-256 9702a0c9692065b9…

MALICIOUS

PDF

18.4 KB Created: 2019-05-07 04:44:30 +01:00 Authoring application: mPDF 5.7
MD5: 2330b08695de340fd114f18b1bb2e8d9 SHA-1: 52984143d364cdb86dedfa387ffea68535fefdf9 SHA-256: 9702a0c9692065b945cf7fd3e3add62f2d75ebb94b96d19fbdc383c07fd4f7f9
92 Risk Score

Malware Insights

MITRE ATT&CK
T1204.002 Malicious File T1566.002 Spearphishing Attachment

The file was detected as malicious by ClamAV with the signature Pdf.Dropper.Agent-7144459-0. The ML classifier also flagged it with high confidence. The PDF contains multiple embedded URLs, indicating a likely dropper functionality where these links would be used to download and execute a second-stage payload. The document body was unreadable, but the presence of embedded links and the ClamAV detection strongly suggest a malicious intent.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9754

Heuristics 3

  • ClamAV: Pdf.Dropper.Agent-7144459-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Dropper.Agent-7144459-0
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://seasasac.lflinkup.com/3da3da7da4da9da7/The-Complete-Judas-Chronicles-Books-One-Through-Seven-by-Aiden-James.pdf
    • http://seasasac.lflinkup.com/1da3da5da1da4da6/Plague-of-Coins-The-Judas-Chronicles-1-by-Aiden-James.pdf
    • http://seasasac.lflinkup.com/1da4da9da6da2da2/Murder-in-Whitechapel-The-Judas-Reflections-1-by-Aiden-James.pdf
    • http://seasasac.lflinkup.com/1da1da6da5da5da3da5/The-Maid-of-Heaven-The-Judas-Reflections-3-by-Aiden-James.pdf
    • http://seasasac.lflinkup.com/1da0da4da9da4da8da0/HOLLY-BLACK-SERIES-READING-ORDER-MAGISTERIUM-BOOKS-MODERN-TALE-OF-FAERIE-BOOKS-SPIDERWICK-CHRONICLES-BOOKS-BEYONG-SPIDERWICK-CHRONICLES-GOOD-NEIGHBORS-BOOKS-BY-HOLLY-BLACK-by-List-Series.pdf
    • http://seasasac.lflinkup.com/2da4da5da7da3da8/Vampires-Ghosts-and-God-Five-Novel-Box-Set-by-Aiden-James.pdf
    • http://seasasac.lflinkup.com/2da4da5da0da6da7/The-Vampires-Birthright-Dying-of-the-Dark-2-by-Aiden-James.pdf
    • http://seasasac.lflinkup.com/2da4da5da0da7da7/The-Vampires-Last-Lover-Dying-of-the-Dark-1-by-Aiden-James.pdf
    • http://seasasac.lflinkup.com/4da6da4da4da4da8/I-Judas-A-Novel-by-James-Reich.pdf
    • http://seasasac.lflinkup.com/5da9da9da2da8da6/Reading-Judas-The-Gospel-of-Judas-and-the-Shaping-of-Christianity-by-Elaine-Pagels.pdf
    • http://seasasac.lflinkup.com/1da4da5da3da4/Ring-the-Judas-Bell-by-James-D-Forman.pdf
    • http://seasasac.lflinkup.com/4da0da3da4da9/The-Judas-Strain-Sigma-Force-4-by-James-Rollins.pdf
    • http://seasasac.lflinkup.com/5da0da0da8da4da7/The-Judas-Strain-A-Sigma-Force-Novel-by-James-Rollins.pdf
    • http://seasasac.lflinkup.com/1da6da8da4da8da7/The-Judas-Strain-Sigma-Force-4-by-James-Rollins.pdf
    • http://seasasac.lflinkup.com/1da1da6da5da5da3da0/A-Murder-at-Armageddon-A-Judas-Thomas-Mystery-The-Judas-Thomas-Mysteries-Book-1-by-A-K-A-Chisti.pdf
    • http://seasasac.lflinkup.com/7da6da2da9da9da1/James-Michener-Books-2017-Checklist-List-of-All-James-Michener-Books-by-Reading-List.pdf
    • http://seasasac.lflinkup.com/4da8da3da5da1da0/Coach-Me-Complete-Books-1-4-by-Cat-Summerfield.pdf
    • http://seasasac.lflinkup.com/5da7da4da8da4da7/The-Complete-Books-by-Charles-Fort.pdf
    • http://seasasac.lflinkup.com/1da8da0da1da9da0/To-Know-Me-The-Complete-Series-Books-1-4-by-Marcy-Blesy.pdf
    • http://seasasac.lflinkup.com/4da5da0da8da5da6/Mastiff-Security-2-The-Complete-6-Books-Series-by-Glenna-Sinclair.pdf
    • http://seasasac.lflinkup.com/2da4da5da7da3da8/Vampires-Ghosts-and-God-Fiv

Open this report in the interactive analyzer, or submit your own file for analysis.