Malicious PDF — malware analysis report

Static analysis result for SHA-256 9da3ffa69bde4515…

MALICIOUS

PDF

21.4 KB Created: 2020-03-14 00:51:05 +00:00 Authoring application: mPDF 5.7
MD5: fc4c08d5c964a9a879d9ff2f31599c72 SHA-1: 97a65e7fa5bba2922d3e675733a77c80d820da5e SHA-256: 9da3ffa69bde45159ad84545927733f6649b44cee1e28c4f2aa3d608ef9cea4b
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

This PDF document contains a large number of embedded links to external PDF files hosted on the domain 'ewasocmo.myhome.cx'. The heuristic 'PDF_SEO_LINK_FARM' indicates this is a link farm, a common technique for SEO poisoning or distributing malicious content. The ML classifier also flagged this PDF as malicious with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ewasocmo.myhome.cx/1c37c34c39c37c35/Earth-Akasha-4-by-Terra-Harmony.pdf
    • http://ewasocmo.myhome.cx/4c35c35c32c39c39/Water-by-Terra-Harmony.pdf
    • http://ewasocmo.myhome.cx/1c32c36c34c37c31/The-Kindred-Curse-Anthology-by-Terra-Harmony.pdf
    • http://ewasocmo.myhome.cx/2c30c36c38c32c33/Earth-No-105-Book-1-by-Ame-Terra.pdf
    • http://ewasocmo.myhome.cx/1c34c33c33c32c30/Mysteries-of-Terra-Firma-The-Age-and-Evolution-of-the-Earth-by-James-Lawrence-Powell.pdf
    • http://ewasocmo.myhome.cx/9c38c33c39c38c31/Giants-and-Pigmies-Earth-s-Order-of-Formation-and-Life-and-Harmony-of-the-Two-Records-by-David-Honeyman.pdf
    • http://ewasocmo.myhome.cx/7c30c36c30c30c32/Articles-on-Dying-Earth-Subgenre-Including-Dying-Earth-the-Dying-Earth-the-Eyes-of-the-Overworld-Cugel-s-Saga-Turjan-Rhialto-the-Marvellous-Tales-of-the-Dying-Earth-Liane-the-Wayfarer-Songs-of-the-Dying-Earth-the-Time-Machine-by-Hephaestus-Books.pdf
    • http://ewasocmo.myhome.cx/2c31c32c32c31c37/Emily-s-House-Akasha-Chronicles-1-by-Natalie-Wright.pdf
    • http://ewasocmo.myhome.cx/6c35c30c31c36c38/Akasha-Sanatorium-Malachai-Brothers-Beyond-the-Veil-1-by-K-M-Neuhold.pdf
    • http://ewasocmo.myhome.cx/2c35c38c37c31c33/Emily-s-Trial-Akasha-Chronicles-2-by-Natalie-Wright.pdf
    • http://ewasocmo.myhome.cx/7c30c35c39c39c39/Dying-Earth-The-Dying-Earth-the-Eyes-of-the-Overworld-Liane-the-Wayfarer-Cugel-s-Saga-Tales-of-the-Dying-Earth-Turjan-by-Books-LLC.pdf
    • http://ewasocmo.myhome.cx/1c31c36c32c38c38c35/Jurassic-Earth-2-Prologue-The-Last-Woman-on-Earth-The-Jurassic-Earth-Saga-by-Logan-T-Stark.pdf
    • http://ewasocmo.myhome.cx/9c32c36c35c36c32/Earth-Construction-Handbook-The-Building-Material-Earth-in-Modern-Architecture-by-Gernot-Minke.pdf
    • http://ewasocmo.myhome.cx/7c34c38c37c31c34/Earth-2-1-Regenesis-Earth-2-0-Trilogy-2-by-William-Crow-Johnson.pdf
    • http://ewasocmo.myhome.cx/1c36c33c31c34c39/The-Third-Earth-Beta-Earth-Chronicles-5-by-Wesley-Britton.pdf
    • http://ewasocmo.myhome.cx/3c37c34c35c30c38/A-Prince-of-Earth-The-Histories-of-Earth-2-by-Steven-J-Carroll.pdf
    • http://ewasocmo.myhome.cx/3c36c37c38c32c39/Breath-of-Earth-Blood-of-Earth-1-by-Beth-Cato.pdf
    • http://ewasocmo.myhome.cx/8c37c30c39c31/Earth-Flight-Earth-Girl-3-by-Janet-Edwards.pdf
    • http://ewasocmo.myhome.cx/3c35c34c34c33c39/Earth-and-Fire-Earth-Girl-0-5-by-Janet-Edwards.pdf
    • http://ewasocmo.myhome.cx/2c38c31c34c36c33/Earth-Sky-Earth-Sky-Trilogy-1-by-Macaulay-C-Hunter.pdf
    • http://ewasocmo.myhome.cx/7c3

Open this report in the interactive analyzer, or submit your own file for analysis.