Malicious PDF — malware analysis report

Static analysis result for SHA-256 9de0d60cc7957fe8…

MALICIOUS

PDF

17.3 KB Created: 2019-05-07 04:29:46 +01:00 Authoring application: mPDF 5.7
MD5: e22687752182d5dbbc1c26d7f0b6e005 SHA-1: d798db3218113071579d52e6ff43cf22e6be3d4e SHA-256: 9de0d60cc7957fe82b5ca70108207eb0bf1c14c168db304de8daf762a1045b47
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. While the URLs themselves are currently marked as benign, the sheer volume and structure suggest a malicious intent to redirect users to potentially harmful content. The ML classifier also strongly indicated maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9931

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a00a05a00a07/Worst-Case-Michael-Bennett-3-by-James-Patterson.pdf
    • http://muicuiu.dumb1.com/2a07a00a01a07a02/Gone-Michael-Bennett-6-by-James-Patterson.pdf
    • http://muicuiu.dumb1.com/5a00a04a04a09/I-Michael-Bennett-Michael-Bennett-5-by-James-Patterson.pdf
    • http://muicuiu.dumb1.com/2a07a01a03a05a07/Burn-Michael-Bennett-7-by-James-Patterson.pdf
    • http://muicuiu.dumb1.com/6a04a01a03a00/Middle-School-The-Worst-Years-of-My-Life-Midde-School-1-by-James-Patterson.pdf
    • http://muicuiu.dumb1.com/6a05a09a02a06a02/The-Worst-Case-Scenario-Survive-o-pedia-by-David-Borgenicht.pdf
    • http://muicuiu.dumb1.com/3a03a00a09a07a04/Worst-Case-Scenario---Book-4-The-State-by-G-Allen-Mercer.pdf
    • http://muicuiu.dumb1.com/6a05a09a01a03a08/The-Worst-Case-Scenario-Almanac-History-by-Joshua-Piven.pdf
    • http://muicuiu.dumb1.com/2a09a02a09a06a08/James-Patterson-Middle-School-Series-Collection-3-Books-Set-Middle-School-1-3-by-James-Patterson.pdf
    • http://muicuiu.dumb1.com/6a05a09a01a03a07/The-Worst-Case-Scenario-Survival-Handbook-Work-by-Joshua-Piven.pdf
    • http://muicuiu.dumb1.com/6a05a09a02a04a01/The-Worst-Case-Scenario-Survival-Handbook-Weddings-by-Joshua-Piven.pdf
    • http://muicuiu.dumb1.com/6a05a09a00a09a01/The-Complete-Worst-Case-Scenario-Survival-Handbook-by-Joshua-Piven.pdf
    • http://muicuiu.dumb1.com/1a01a09a07a02a00/Seven-Days-and-Six-Worst-Case-Scenarios-Victoria-Douglas-Vacation-Mysteries-1-by-Leslie-Huggans.pdf
    • http://muicuiu.dumb1.com/5a08a02a06a03a01/The-Case-of-the-Bouncing-Betty-The-Case-of-the-Violent-Virgin-by-Michael-Avallone.pdf
    • http://muicuiu.dumb1.com/6a05a09a01a04a01/The-Worst-Case-Scenario-Survival-Handbook-Life-Life-by-Joshua-Piven.pdf
    • http://muicuiu.dumb1.com/2a09a04a00a08a04/Mommy-Knows-Worst-Highlights-from-the-Golden-Age-of-Bad-Parenting-Advice-by-James-Lileks.pdf
    • http://muicuiu.dumb1.com/1a08a06a08a07a09/Now-You-See-Her-by-James-Patterson.pdf
    • http://muicuiu.dumb1.com/2a09a01a00a03/Now-You-See-Her-by-James-Patterson.pdf
    • http://muicuiu.dumb1.com/5a00a05a01a01a02/Zoo-by-James-Patterson.pdf
    • http://muicuiu.dumb1.com/3a05a02a00/Zoo-2-Zoo-1-5-by-James-Patterson.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.