Malicious PDF — malware analysis report

Static analysis result for SHA-256 9fcb54410b5956a7…

MALICIOUS

PDF

21.0 KB Created: 2019-05-01 19:24:57 +01:00 Authoring application: mPDF 5.7
MD5: 2de062245e8166dd7a3edca3c246e13a SHA-1: 714e0483ee825a6aafee0a0d6e68e1cc88e356f8 SHA-256: 9fcb54410b5956a7a5802a8aa9e07e57d3dcdc445c433062e26dad276f740345
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file was flagged by a machine learning classifier and contains a large number of embedded links, indicating a link farm or phishing attempt. The primary heuristic identified a "PDF_SEO_LINK_FARM" with 26 external PDF links, suggesting the document is designed to lure users to other sites. The embedded URLs, while currently marked as benign, are part of a pattern often used to distribute malware or lead to phishing pages.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cmeinasaoo.duckdns.org/2b25b29b20b20b26/The-Everything-Guide-to-Living-Off-the-Grid-A-back-to-basics-manual-for-independent-living-by-Terri-Reid.pdf
    • http://cmeinasaoo.duckdns.org/1b21b27b28b27b27b25/Off-Grid-Living-15-Amazing-Lessons-on-the-Advantages-That-Living-Off-the-Grid-in-a-Community-Brings-by-Mach-Bush.pdf
    • http://cmeinasaoo.duckdns.org/2b22b28b25b22/The-Woman-s-Field-Guide-to-Exceptional-Living-Practical-Steps-for-Living-a-Big-Bold-Beautiful-Life-by-Corrie-Woods.pdf
    • http://cmeinasaoo.duckdns.org/1b20b29b25b22b24b24/Off-Grid-Living-Food-and-Drinking-Water-Storage-by-Steve-Edwardson.pdf
    • http://cmeinasaoo.duckdns.org/9b29b21b26b21b22/Let-s-Get-Down-to-Basics-An-Introduction-to-Christian-Living-by-Rick-Blumenberg.pdf
    • http://cmeinasaoo.duckdns.org/7b26b24b25b29b22/Living-Russian-Revised-dictionary-The-Complete-Living-Language-Course-by-Nadya-Peterson.pdf
    • http://cmeinasaoo.duckdns.org/4b28b25b29b20b25/Living-In-Living-Out-African-American-Domestics-in-Washington-D-C-1910-1940-by-Elizabeth-Clark-Lewis.pdf
    • http://cmeinasaoo.duckdns.org/3b29b21b20b20b23/Living-Buddha-Living-Christ-by-Thich-Nhat-Hanh.pdf
    • http://cmeinasaoo.duckdns.org/9b29b23b27b23/Mindfulness-Living-in-the-Moment---Living-in-the-Breath-by-Amit-Ray.pdf
    • http://cmeinasaoo.duckdns.org/5b28b28b21b24/The-Living-The-Living-1-by-Matt-de-la-Pena.pdf
    • http://cmeinasaoo.duckdns.org/1b21b22b22b21b26/The-Beginner-s-Guide-to-Living-by-Lia-Hills.pdf
    • http://cmeinasaoo.duckdns.org/8b29b20b23b28b25/Back-Care-Basics-A-Doctor-s-Gentle-Yoga-Program-for-Back-and-Neck-Pain-Relief-by-Mary-Pullig-Schatz.pdf
    • http://cmeinasaoo.duckdns.org/2b28b29b20b22b27/The-Realeat-Guide-to-Vegetarian-Living-by-Peter-Cox.pdf
    • http://cmeinasaoo.duckdns.org/3b24b23b28b26b23/The-Cannibal-s-Guide-to-Ethical-Living-by-Mykle-Hansen.pdf
    • http://cmeinasaoo.duckdns.org/7b29b22b28b22/Living-With-IT-A-Survivor-s-Guide-to-Panic-Attacks-by-Bev-Aisbett.pdf
    • http://cmeinasaoo.duckdns.org/9b29b24b28b22b28/23-Why-the-Psalm-for-Dying-is-a-Guide-for-Living-by-Eran-Holt.pdf
    • http://cmeinasaoo.duckdns.org/1b25b21b22b23b27/A-Gentleman-s-Guide-to-Graceful-Living-by-Michael-Dahlie.pdf
    • http://cmeinasaoo.duckdns.org/4b20b27b25b29b29/How-to-Speak-Zombie-A-Guide-for-the-Living-by-Steve-Mockus.pdf
    • http://cmeinasaoo.duckdns.org/1b28b29b29b27b23/Living-the-Life-God-Has-Planned-A-Guide-to-Knowing-God-s-Will-by-Bill-Thrasher.pdf
    • http://cmeinasaoo.duckdns.org/4b27b22b27b28b24/Living-in-Conscious-Harmony-A-Spiritual-Guide-to-Being-in-the-Now-by-Sullins-Stuart.pdf
    • http://cmeinasaoo.duckdns.org/9b29b21b26

Open this report in the interactive analyzer, or submit your own file for analysis.