Malicious PDF — malware analysis report

Static analysis result for SHA-256 9750882e4d67fbfa…

MALICIOUS

PDF

20.4 KB Created: 2019-04-30 03:45:54 +01:00 Authoring application: mPDF 5.7
MD5: 3c0b8616cdef3b9d4372911ffe64fd41 SHA-1: 1d23174072a3f67edf83fdb179b4e8dfbf440fdd SHA-256: 9750882e4d67fbfacb41deff7a8bdccdfc48c1cd1f96c56cf9ed7d8b22603d73
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF file contains a large number of embedded external links, as indicated by the PDF_SEO_LINK_FARM heuristic. While most of these links point to benign content, the sheer volume and the ML classifier's high confidence score suggest a malicious intent, likely for SEO manipulation or to serve as a distribution point for further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/4a04a03a02a06a09/The-Resistance-The-Bionics-Novels-2-by-Alicia-Michaels.pdf
    • http://muicuiu.dumb1.com/9a06a02a07a05a08/The-Lost-Kingdom-of-Fallada-Volume-1-Box-Set-by-Alicia-Michaels.pdf
    • http://muicuiu.dumb1.com/9a06a02a04a02a05/Rise-of-the-Tide-The-Lost-Kingdom-of-Fallada-3-by-Alicia-Michaels.pdf
    • http://muicuiu.dumb1.com/9a06a02a04a03a02/Beyond-the-Iron-Gate-Zara-s-Journey-The-Lost-Kingdom-of-Fallada-0-5-by-Alicia-Michaels.pdf
    • http://muicuiu.dumb1.com/4a04a02a09a05a02/The-Bionics-Bionics-1-by-Alicia-Michaels.pdf
    • http://muicuiu.dumb1.com/7a07a09a00a03a03/NU-Soul-Album-de-NU-Soul-Artiste-de-Neo-Soul-Tournee-de-NU-Soul-Alicia-Keys-Liste-Des-Recompenses-Et-Nominations-D-Alicia-Keys-Mama-s-Gun-the-Diary-of-Alicia-Keys-Common-Corinne-Bailey-Rae-Unplugged-D-Angelo-Lauryn-Hill-Neo-Soul-by-Source-Wikipedia.pdf
    • http://muicuiu.dumb1.com/9a03a06a08a01a06/Kellogg-on-Biotechnology-Thriving-Through-Integration-Edited-by-Alicia-Lffler-by-Alicia-Loffler.pdf
    • http://muicuiu.dumb1.com/3a08a03a06a07a09/Brute-by-Kim-Fielding.pdf
    • http://muicuiu.dumb1.com/2a08a07a02a06a09/The-Bride-and-the-Brute-by-Laurel-O-39-Donnell.pdf
    • http://muicuiu.dumb1.com/1a01a08a08a09a02a03/Brute-A-Tale-of-the-Spartan-Creed-by-J-Rocko.pdf
    • http://muicuiu.dumb1.com/9a00a05a09a07/Brute-A-Twisted-Erotic-Fairy-Tale-by-Georgia-Fox.pdf
    • http://muicuiu.dumb1.com/1a00a04a01a07a08a04/Alicia-en-el-Pa-s-de-las-Maravillas-Alicia-en-el-pa-s-de-las-Maravillas-Y-Atrav-s-del-espejo-Un-eBook-con-dos-novelas-cl-sicas-n-9-by-Lewis-Carroll.pdf
    • http://muicuiu.dumb1.com/5a00a00a00a02a06/Looking-Backward-by-Edward-Bellamy.pdf
    • http://muicuiu.dumb1.com/2a05a08a03a01a03/White-Ginger-by-Susanne-Bellamy.pdf
    • http://muicuiu.dumb1.com/1a08a08a04a04a02/One-Prayer-Away-by-Kendra-Norman-Bellamy.pdf
    • http://muicuiu.dumb1.com/1a05a04a01a09a01/Looking-Backward-2000-1887-by-Edward-Bellamy.pdf
    • http://muicuiu.dumb1.com/9a09a09a03a04a00/Song-of-Solomon-by-Kendra-Norman-Bellamy.pdf
    • http://muicuiu.dumb1.com/4a00a05a08a05a05/For-Love-and-Grace-by-Kendra-Norman-Bellamy.pdf
    • http://muicuiu.dumb1.com/1a01a04a03a05a08a06/Ah-Heck-The-Angel-Chronicles-by-Mary-Bellamy.pdf
    • http://muicuiu.dumb1.com/8a07a02a09a07a02/Lark-Bellamy-s-Blossoms-2-by-Ginny-Aiken.pdf
    • http://muicuiu.dumb1.com/9a03a06a08a01a06/Kellogg-on-Biotechnology-Thriving-Through-Integration-Edited-by-Alicia-Lffler-by-Alicia-Lo

Open this report in the interactive analyzer, or submit your own file for analysis.