Malicious PDF — malware analysis report

Static analysis result for SHA-256 a003a96f97efc408…

MALICIOUS

PDF

14.8 KB Created: 2019-04-30 04:32:32 +01:00 Authoring application: mPDF 5.7
MD5: b0b708b0f41dd70199923a86100abf84 SHA-1: bbccbdc721d49b5a83466342c626796b1311c93c SHA-256: a003a96f97efc408360305cc91ea57136ff063c3009fc807e0c9f59ecb1ec5a6
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. While the specific URLs extracted are currently marked as benign, the sheer volume and structure suggest a malicious intent, likely for SEO poisoning or to distribute further malicious content. The ML_NYX_PDF_MALICIOUS classifier also strongly indicated maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9798

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/4a05a03a06a02a04/The-Secret-Diary-of-Adrian-Mole-Aged-13-3-4-Adrian-Mole-1-by-Sue-Townsend.pdf
    • http://muicuiu.dumb1.com/8a07a01a03a06a09/Adrian-Mole-The-Lost-Years-Adrian-Mole-1-4-by-Sue-Townsend.pdf
    • http://muicuiu.dumb1.com/3a07a01a02a09a06/Adrian-Mole-The-Wilderness-Years-Adrian-Mole-4-by-Sue-Townsend.pdf
    • http://muicuiu.dumb1.com/4a08a06a05a03/Adrian-Mole-The-Cappuccino-Years-Adrian-Mole-5-by-Sue-Townsend.pdf
    • http://muicuiu.dumb1.com/2a07a04a08a00a02/Adrian-Mole-The-Cappuccino-Years-Adrian-Mole-5-by-Sue-Townsend.pdf
    • http://muicuiu.dumb1.com/6a00a06a05a04/The-Growing-Pains-of-Adrian-Mole-by-Sue-Townsend.pdf
    • http://muicuiu.dumb1.com/1a04a01a08a03a04/Adrian-Mole-The-Prostrate-Years-by-Sue-Townsend.pdf
    • http://muicuiu.dumb1.com/2a09a04a09a08a03/Mole-and-Troll-Trim-the-Tree-Mole-and-Troll-2-by-Tony-Johnston.pdf
    • http://muicuiu.dumb1.com/9a02a02a02a00a02/My-Diary-by-Kylie-Mole-by-Maryanne-Fahey.pdf
    • http://muicuiu.dumb1.com/4a00a06a03a07a04/The-Trinity-Adrian-s-Undead-Diary-7-by-Chris-Philbrook.pdf
    • http://muicuiu.dumb1.com/3a05a09a03a02a05/The-Failed-Coward-Adrian-s-Undead-Diary-4-by-Chris-Philbrook.pdf
    • http://muicuiu.dumb1.com/4a04a09a08a07a03/How-to-Make-Love-to-Adrian-Colesberry-by-Adrian-Colesberry.pdf
    • http://muicuiu.dumb1.com/9a02a02a01a05a04/The-Mole-by-Dan-Sherman.pdf
    • http://muicuiu.dumb1.com/7a03a03a02a02a07/Public-Confessions-of-a-Middle-Aged-Woman-by-Sue-Townsend.pdf
    • http://muicuiu.dumb1.com/9a02a02a01a00a03/Mole-Had-Everything-by-Jamison-Odone.pdf
    • http://muicuiu.dumb1.com/8a08a00a09a03/Miss-Mole-by-E-H-Young.pdf
    • http://muicuiu.dumb1.com/9a02a02a01a00a08/A-Friend-for-Mole-by-Nancy-Armo.pdf
    • http://muicuiu.dumb1.com/1a00a07a03a04a02/The-Magic-Mole-by-Martha-Kehr.pdf
    • http://muicuiu.dumb1.com/9a02a02a01a00a01/Trusted-Mole-by-Milos-Stankovic.pdf
    • http://muicuiu.dumb1.com/4a08a01a01a08a06/Mole-Music-by-David-McPhail.pdf
    • http://muicuiu.dumb1.com/4a00a06a03a07a04/The-Tr

Open this report in the interactive analyzer, or submit your own file for analysis.