Malicious PDF — malware analysis report

Static analysis result for SHA-256 9baee9be0f03dce9…

MALICIOUS

PDF

19.0 KB Created: 2019-05-03 06:06:48 +01:00 Authoring application: mPDF 5.7
MD5: 3101ca9f74cc343ad6ca67f20d218bc7 SHA-1: 6d7b4f45ef3f8735184cc9d76c82c6632593a3d4 SHA-256: 9baee9be0f03dce91cd4b247e9fa81c9888005c6a3077196aa7f27dbe7ca7f7f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded links to external PDF documents, as indicated by the PDF_SEO_LINK_FARM heuristic. While the document body is heavily obfuscated, the presence of numerous links suggests an attempt to direct users to a wide array of content, potentially for SEO manipulation or to host malicious payloads disguised as legitimate documents. The ML classifier also strongly indicated maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a01a06a02a09a05a05/Prey-Jurassic-Park-Adventures-2-by-Scott-Ciencin.pdf
    • http://muicuiu.dumb1.com/1a01a06a02a09a06a05/Flyers-Jurassic-Park-Adventures-3-by-Scott-Ciencin.pdf
    • http://muicuiu.dumb1.com/1a01a06a02a09a06a00/Jurassic-Park-Michael-Crichton-List-of-Jurassic-Park-Characters-the-Lost-World-Jurassic-Park-Jurassic-Park-III-Biological-Issue-by-Source-Wikipedia.pdf
    • http://muicuiu.dumb1.com/5a00a02a03a01/Jurassic-Park-The-Lost-World-Jurassic-Park-1-2-by-Michael-Crichton.pdf
    • http://muicuiu.dumb1.com/1a01a06a02a08a02a08/Jurassic-Sea-Jurassic-Adventures-2-by-Viktor-Zarkov.pdf
    • http://muicuiu.dumb1.com/1a03a07a06a01a00/Jurassic-World-Jurassic-Park-The-Lost-World-by-Michael-Crichton.pdf
    • http://muicuiu.dumb1.com/6a05a06a07a01a08/Jurassic-Park-and-Congo-by-Michael-Crichton.pdf
    • http://muicuiu.dumb1.com/1a01a06a02a09a05a07/The-Dinosaurs-Of-Jurassic-Park-by-Wendy-Larson.pdf
    • http://muicuiu.dumb1.com/1a01a06a03a01a04a00/Jurassic-Park-Piano-Solos-by-John-Williams.pdf
    • http://muicuiu.dumb1.com/1a01a06a03a01a04a09/Jurassic-Park-Film-Storybook-by-Jane-B-Mason.pdf
    • http://muicuiu.dumb1.com/1a01a06a02a09a06a03/Jurassic-Park-easy-piano-by-John-Williams.pdf
    • http://muicuiu.dumb1.com/1a01a06a03a01a04a02/Jurassic-Park-The-Lost-World-The-Junior-Novelization-by-Gail-Herman.pdf
    • http://muicuiu.dumb1.com/1a01a06a03a01a03a09/Classic-Jurassic-Park-Volume-2-Raptor-s-Revenge-by-Walter-Simonson.pdf
    • http://muicuiu.dumb1.com/1a01a06a03a00a05a06/Jurassic-Block-Minecraft-Steve-Adventures-3-by-Funny-Comics.pdf
    • http://muicuiu.dumb1.com/9a09a04a01a09a00/The-Michael-Crichton-Collection-Jurassic-Park-The-Lost-World-The-Andromeda-Strain-by-Michael-Crichton.pdf
    • http://muicuiu.dumb1.com/9a01a00a05a00a09/Spirits-in-the-Park-Gods-of-Manhattan-2-by-Scott-Mebus.pdf
    • http://muicuiu.dumb1.com/1a01a06a02a08a08a05/Jurassic-Earth-2-Prologue-The-Last-Woman-on-Earth-The-Jurassic-Earth-Saga-by-Logan-T-Stark.pdf
    • http://muicuiu.dumb1.com/3a08a01a08a05a03/Canyon-Sacrifice-National-Park-Mystery-1-by-Scott-Graham.pdf
    • http://muicuiu.dumb1.com/5a04a03a00a01a02/Bear-in-the-Back-Seat-II-Adventures-of-a-Wildlife-Ranger-in-the-Great-Smoky-Mountains-National-Park-by-Carolyn-Jourdan.pdf
    • http://muicuiu.dumb1.com/4a07a04a01a01a06/Adventures-of-a-Waterboy-by-Mike-Scott.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.