Malicious PDF — malware analysis report

Static analysis result for SHA-256 9dcd8967f67e8e92…

MALICIOUS

PDF

20.8 KB Created: 2019-05-01 10:59:18 +01:00 Authoring application: mPDF 5.7
MD5: 8b65b71bbedd00aa33adbb2e985dcf59 SHA-1: 536b2c9f5521e3d4aeac602a01b31b15b2b0a20d SHA-256: 9dcd8967f67e8e92ecb012836c2bfc8785703b6b6ec9bf917363ce4843a67820
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded links to external PDF documents, a technique often used for SEO poisoning or to distribute malicious content. The ML classifier strongly indicated maliciousness. While no scripts were extracted, the PDF structure itself is indicative of a malicious distribution attempt.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/3a03a05a01a01a08/It-s-Criminal-The-True-Confessions-of-a-Jet-Set-Master-Criminal-by-James-Crosbie.pdf
    • http://muicuiu.dumb1.com/9a04a02a09a06a04/International-Criminal-Law-and-Sexual-Violence-Against-Women-The-Interpretation-of-Gender-in-the-Contemporary-International-Criminal-Trial-by-Daniela-Nadj.pdf
    • http://muicuiu.dumb1.com/6a06a02a02a06a09/International-criminal-responsibility-of-states-a-study-on-the-evolution-of-state-responsibility-with-particular-emphasis-on-the-concept-of-crime-and-criminal-responsibility-by-Farhad-Malekian.pdf
    • http://muicuiu.dumb1.com/4a02a06a02a04a02/The-First-Detective-The-Life-and-Revolutionary-Times-of-Eugene-Vidocq-Criminal-Spy-and-Private-Eye-by-James-Morton.pdf
    • http://muicuiu.dumb1.com/2a02a06a03a00a01/Process-is-the-Punishment-The-Handling-Cases-in-a-Lower-Criminal-Court-Handling-Cases-in-a-Lower-Criminal-Court-by-Malcolm-M-Feeley.pdf
    • http://muicuiu.dumb1.com/2a09a09a06a03/Criminal-by-Karin-Slaughter.pdf
    • http://muicuiu.dumb1.com/2a04a02a03a09a09/Criminal-Will-Trent-6-by-Karin-Slaughter.pdf
    • http://muicuiu.dumb1.com/5a03a01a05a09a09/Criminal-Conversation-by-Evan-Hunter.pdf
    • http://muicuiu.dumb1.com/5a00a07a05a09a04/Criminal-Procedure-in-Ghana-by-A-N-E-Amissah.pdf
    • http://muicuiu.dumb1.com/6a02a04a06a04a06/Criminal-Procedure-by-Steven-L-Emanuel.pdf
    • http://muicuiu.dumb1.com/1a06a07a06a08/Criminal-by-Terra-Elan-McVoy.pdf
    • http://muicuiu.dumb1.com/1a05a07a05a03a02/Fly-by-Night-Criminal-Elements-2-by-Clare-Meyers.pdf
    • http://muicuiu.dumb1.com/1a01a08a08a09a03a07/Criminal-Minds-Fox-Meridian-4-by-Niall-Teasdale.pdf
    • http://muicuiu.dumb1.com/7a03a03a01a05/Killer-Year-A-Criminal-Anthology-by-Lee-Child.pdf
    • http://muicuiu.dumb1.com/1a07a03a06a07/Criminal-Violence-Justice-by-Charles-E-Silberman.pdf
    • http://muicuiu.dumb1.com/5a01a05a09a08a01/Criminal-Law-in-Liberal-and-Fascist-Italy-by-Paul-Garfinkel.pdf
    • http://muicuiu.dumb1.com/9a08a06a04a02a03/Essential-Texts-on-International-and-European-Criminal-Law-by-Vermeulen.pdf
    • http://muicuiu.dumb1.com/1a01a05a00/Unfair-The-New-Science-of-Criminal-Injustice-by-Adam-Benforado.pdf
    • http://muicuiu.dumb1.com/2a09a07a06a02a00/War-Criminal-s-Widow-The-Girl-from-Berlin-3-by-Ellie-Midwood.pdf
    • http://muicuiu.dumb1.com/7a09a09a09a05a07/Criminal-Macabre-Omnibus-Volume-2-by-Nick-Stakal.pdf
    • http://muicuiu.dumb1.com/6a06a02a02a06a09/Int

Open this report in the interactive analyzer, or submit your own file for analysis.