Malicious PDF — malware analysis report

Static analysis result for SHA-256 9e4c6619bc80e5fe…

MALICIOUS

PDF

17.4 KB Created: 2019-05-02 05:32:48 +01:00 Authoring application: mPDF 5.7 First seen: 2021-02-09
MD5: f024064748c20c12850efe21f963d9f6 SHA-1: 4096e9780b78241721e909c6914bd90fbbfd1991 SHA-256: 9e4c6619bc80e5fe2fc0135e62137abf51c0c7479cf6bb5e15d862c71b540d94
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9788

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/5739734731736/Journey-Into-Darkness-Mindhunter-2-by-John-Edward-Douglas.pdf In PDF document text
    • http://cefasfese.4pu.com/2732730736739735/Law-amp-Disorder-by-John-Edward-Douglas.pdfIn PDF document text
    • http://cefasfese.4pu.com/9730736736737736/Anatomie-des-M-rders-by-John-Edward-Douglas.pdfIn PDF document text
    • http://cefasfese.4pu.com/2735732733732730/Anyone-You-Want-Me-to-Be-A-True-Story-of-Sex-and-Death-on-the-Internet-by-John-Edward-Douglas.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730736732733736733/Die-Seele-des-M-rders-25-Jahre-in-der-FBI-Einheit-f-r-Serienverbrechen-by-John-Edward-Douglas.pdfIn PDF document text
    • http://cefasfese.4pu.com/4735734733738739/Darkness-Darkness-Charlie-Resnick-12-by-John-Harvey.pdfIn PDF document text
    • http://cefasfese.4pu.com/1733732733735730/Throne-of-Darkness-Something-Red-3-by-Douglas-Nicholas.pdfIn PDF document text
    • http://cefasfese.4pu.com/2730737734737731/In-the-Darkness-by-Charles-Edward.pdfIn PDF document text
    • http://cefasfese.4pu.com/7739731738736732/Servants-of-Darkness-by-Mark-Edward-Hall.pdfIn PDF document text
    • http://cefasfese.4pu.com/1738730735731/The-Journey-of-Sir-Douglas-Fir-by-Ric-Reitz.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730732738738732732/Darkness-Between-the-Stars-Eaters-of-the-Light-1-by-J-Edward-Neill.pdfIn PDF document text
    • http://cefasfese.4pu.com/5738732738738733/Assam-Tea---the-journey-by-Anjana-Douglas.pdfIn PDF document text
    • http://cefasfese.4pu.com/1735730731739733/Journey-of-the-North-Star-by-Douglas-J-Penick.pdfIn PDF document text
    • http://cefasfese.4pu.com/7736733739732733/Journey-in-Bardo-by-Edward-LeMond.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730739737738730/Darkness-Falls-on-the-Land-of-Light-Experiencing-Religious-Awakenings-in-Eighteenth-Century-New-England-by-Douglas-L-Winiarski.pdfIn PDF document text
    • http://cefasfese.4pu.com/1733733731732733/As-Darkness-Falls-Hypnotic-Journey-3-by-Alaina-Stanford.pdfIn PDF document text
    • http://cefasfese.4pu.com/5732731733734731/The-Brow-of-Dawn-One-Woman-s-Journey-with-MS-by-Catherine-Edward.pdfIn PDF document text
    • http://cefasfese.4pu.com/3738733732734736/Beethoven-for-a-Later-Age-The-Journey-of-a-String-Quartet-by-Edward-Dusinberre.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731734734738732738/The-River-A-Journey-to-the-Source-of-HIV-and-AIDS-by-Edward-Hooper.pdfIn PDF document text
    • http://cefasfese.4pu.com/4736731733733730/Journey-Through-the-Darkness-Poems-from-a-Diseased-Mind-by-Benjamin-Merrill.pdfIn PDF document text