Malicious PDF — malware analysis report

Static analysis result for SHA-256 9e1817b38a9359dc…

MALICIOUS

PDF

24.0 KB Created: 2019-04-30 04:38:30 +01:00 Authoring application: mPDF 5.7
MD5: c5ba6fc0385bfd3629e79e3533da71f0 SHA-1: d2872f3d6180142f79cd186201f2a6ea1f568600 SHA-256: 9e1817b38a9359dc15daf70bb03dc763bad951ae3b0c4bd9a2dc2bf6a94f1e19
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. While most of these URLs point to benign-looking academic papers, the sheer volume and the nature of the heuristic suggest a link farm or SEO manipulation tactic. The ML_NYX_PDF_MALICIOUS classifier also flagged this document with high confidence. No scripts were extracted from this sample. The attack pattern is likely to mislead users or search engines.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9901

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a01a06a05a09a09a02/Kalman-Filtering-and-Neural-Networks-by-Simon-Haykin.pdf
    • http://muicuiu.dumb1.com/5a05a08a06a00a07/Modern-Digital-and-Analog-Communication-Systems-by-B-P-Lathi.pdf
    • http://muicuiu.dumb1.com/7a09a01a01a04a03/Co-Design-Approaches-to-Dependable-Networked-Control-Systems-by-Daniel-Simon.pdf
    • http://muicuiu.dumb1.com/5a05a08a07a01a00/Mass-Communication-Theory-Foundations-Ferment-and-Future-with-InfoTrac-Wadsworth-Series-in-Mass-Communication-and-Journalism-by-Stanley-J-Baran.pdf
    • http://muicuiu.dumb1.com/5a07a04a03a00a03/Modeling-and-Managing-Interdependent-Complex-Systems-of-Systems-by-Yacov-Y-Haimes.pdf
    • http://muicuiu.dumb1.com/5a07a04a03a05a02/Electoral-Systems-and-Party-Systems-A-Study-of-Twenty-Seven-Democracies-1945-1990-by-Arend-Lijphart.pdf
    • http://muicuiu.dumb1.com/8a07a04a01a05/Simon-s-Cat-in-Kitten-Chaos-Simon-s-Cat-3-by-Simon-Tofield.pdf
    • http://muicuiu.dumb1.com/1a00a06a02a07a05a01/Acquisition-of-Major-Weapons-Systems-by-the-Department-of-Defense-and-S-454-the-Weapon-Systems-Acquisition-Reform-Act-of-2009-by-U-S-Congress.pdf
    • http://muicuiu.dumb1.com/7a09a09a04a08a01/Unifying-Themes-in-Complex-Systems-VII-Proceedings-of-the-Seventh-International-Conference-on-Complex-Systems-by-Ali-A-Minai.pdf
    • http://muicuiu.dumb1.com/7a09a09a04a08a06/Unifying-Themes-in-Complex-Systems-Vol-V-Proceedings-of-the-Fifth-International-Conference-on-Complex-Systems-by-Ali-A-Minai.pdf
    • http://muicuiu.dumb1.com/3a01a07a06a06a05/Simon-s-Cat-vs-the-World-Simon-s-Cat-4-by-Simon-Tofield.pdf
    • http://muicuiu.dumb1.com/7a01a06a06a02a07/Intelligent-Information-Systems-2001-Proceedings-of-the-International-Symposium-Intelligent-Information-Systems-X-June-18-22-2001-Zakopane-Poland-by-M-A-Kopotek.pdf
    • http://muicuiu.dumb1.com/1a00a08a01a03a04a04/Complex-Systems-Design-amp-Management-Asia-Smart-Nations-Sustaining-and-Designing-Proceedings-of-the-Second-Asia-Pacific-Conference-on-Complex-Systems-Design-amp-Management-CSD-amp-M-Asia-2016-by-Michel-Alexandre-Cardin.pdf
    • http://muicuiu.dumb1.com/3a01a08a00a02a05/Simon-s-Cat-Off-to-the-Vet-and-Other-Cat-astrophes-by-Simon-Tofield.pdf
    • http://muicuiu.dumb1.com/4a05a03a01a01a05/The-120-Days-of-Simon-by-Simon-G-rdenfors.pdf
    • http://muicuiu.dumb1.com/7a05a06a00a04a02/Memoirs-of-the-Duc-de-Saint-Simon-1710-1715-by-Louis-de-Rouvroy-Saint-Simon.pdf
    • http://muicuiu.dumb1.com/7a03a07a00a06a09/Franklin-Simon-Fashion-Catalog-for-1923-by-Franklin-Simon-amp-Co-.pdf
    • http://muicuiu.dumb1.com/3a04a00a07a06a07/Simon-Thorn-and-the-Wolf-s-Den-Simon-Thorn-1-by-Aimee-Carter.pdf
    • http://muicuiu.dumb1.com/9a05a08a03a00a07/Simon-s-Cat-by-Simon-Tofield.pdf
    • http://muicuiu.dumb1.com/6a05a07a01a00a07/Communication-Skills-by-Mahi.pdf
    • http://muicuiu.dumb1.com/5a07a04a03a05a02/Electoral-Systems-and-Party-Systems-A-St

Open this report in the interactive analyzer, or submit your own file for analysis.