Malicious PDF — malware analysis report

Static analysis result for SHA-256 980ccfa359f4806a…

MALICIOUS

PDF

16.5 KB Created: 2019-04-30 18:33:08 +01:00 Authoring application: mPDF 5.7 First seen: 2021-04-01
MD5: 60a7f3c235259dc4a19f11582a387a2c SHA-1: 516461f2a7356505bbbc4320884342188255e5a9 SHA-256: 980ccfa359f4806acdc5c5f41ccfea6063ad27592f6247451d7d17bdacd04264
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/5202204201200/The-Last-Star-The-5th-Wave-3-by-Rick-Yancey.pdf In PDF document text
    • http://xiixmcuin.linkpc.net/1200202207207/The-5th-Wave-The-5th-Wave-1-by-Rick-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/2206201202207208/The-5th-Wave-The-5th-Wave-1-by-Rick-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/7209205200205/The-5th-Wave-The-5th-Wave-1-by-Rick-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/7203206208209/The-5th-Wave-The-5th-Wave-1-by-Rick-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/7201205204205207/The-5th-Wave-The-5th-Wave-1-by-Rick-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/4207208205200/The-Infinite-Sea-The-5th-Wave-2-by-Rick-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/2206206202201201/The-Infinite-Sea-The-5th-Wave-2-by-Rick-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/6209202208202/The-Curse-of-the-Wendigo-The-Monstrumologist-2-by-Rick-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/2204204205208204/The-Final-Descent-The-Monstrumologist-4-by-Rick-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/9205206208204203/Der-Monstrumologe-und-das-Drachen-Ei-Der-Monstrumologe-4-by-Rick-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/1201208203208209/The-Rock-Star-by-Rick-Soper.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/1206204201204209/Star-Trek-The-Next-Generation-Technical-Manual-by-Rick-Sternbach.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/6205209206209201/The-Highly-Effective-Detective-Plays-the-Fool-The-Highly-Effective-Detective-3-by-Rick-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/4203207200208201/Rick-Steves-Postcards-from-Europe-25-Years-of-Travel-Tales-from-America-s-Favorite-Guidebook-Writer-by-Rick-Steves.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/3208204202203/Demigods-and-Monsters-Your-Favorite-Authors-on-Rick-Riordan-s-Percy-Jackson-and-the-Olympians-Series-by-Rick-Riordan.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/6205209206207207/Yancey-s-War-by-William-Hoffman.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/6205209206208203/I-Was-Just-Wondering-by-Philip-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/2205201206207205/The-Question-That-Never-Goes-Away-by-Philip-Yancey.pdfIn PDF document text
    • http://xiixmcuin.linkpc.net/8209206209203/Where-Is-God-When-It-Hurts-by-Philip-Yancey.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.