Malicious PDF — malware analysis report

Static analysis result for SHA-256 a0671575c9a438b8…

MALICIOUS

PDF

17.0 KB Created: 2019-04-30 04:27:30 +01:00 Authoring application: mPDF 5.7
MD5: 8bfa1ff50aee52d533af68937ee21c56 SHA-1: 76788c664ab140c038f676ebdb56112a51a28318 SHA-256: a0671575c9a438b8e5c4acd4f57398099f57cdf8868d8f4cd9b5065d2ffcc2d2
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links to external websites, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML_NYX_PDF_MALICIOUS heuristic also flagged the document with high confidence. The embedded URLs, while appearing benign in isolation, are part of a pattern likely intended to manipulate search engine results or redirect users to malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/4a00a04a04a05a03/Demon-Soul-Untamed-1-by-Julie-Anne-Addicott.pdf
    • http://muicuiu.dumb1.com/4a00a03a08a03a04/Steel-Constant-Craving-The-Curse-of-the-Fallen-2-by-Julie-Anne-Addicott.pdf
    • http://muicuiu.dumb1.com/4a02a05a07a05a07/The-Demon-You-Know-Demon-Hunting-Soccer-Mom-4-5-by-Julie-Kenner.pdf
    • http://muicuiu.dumb1.com/1a05a09a08a03a07/Demon-Untamed-Shadow-Quest-4-by-Kiersten-Fay.pdf
    • http://muicuiu.dumb1.com/2a03a03a00a01a06/Demons-Are-Forever-Demon-Hunting-Soccer-Mom-3-by-Julie-Kenner.pdf
    • http://muicuiu.dumb1.com/4a01a00a02a04a09/Untamed-Untamed-1-by-Victoria-Green.pdf
    • http://muicuiu.dumb1.com/1a03a08a00a02a01/Death-of-the-Demon-Hanne-Wilhelmsen-3-by-Anne-Holt.pdf
    • http://muicuiu.dumb1.com/3a05a03a02a07a00/Death-of-the-Demon-A-Hanne-Wilhelmsen-Novel-by-Anne-Holt.pdf
    • http://muicuiu.dumb1.com/1a01a02a07a04a07/It-s-Our-Prom-by-Julie-Anne-Peters.pdf
    • http://muicuiu.dumb1.com/3a01a07a03a00a01/Luna-by-Julie-Anne-Peters.pdf
    • http://muicuiu.dumb1.com/1a01a02a07a00a05/grl2grl-by-Julie-Anne-Peters.pdf
    • http://muicuiu.dumb1.com/4a08a05a04a01a03/In-Place-of-Never-by-Julie-Anne-Lindsey.pdf
    • http://muicuiu.dumb1.com/3a06a03a05a03a07/Post-Apocalypse-by-Conner-Addicott.pdf
    • http://muicuiu.dumb1.com/3a06a00a06a09/Keeping-You-a-Secret-by-Julie-Anne-Peters.pdf
    • http://muicuiu.dumb1.com/8a01a09a05a05a05/A-Beautiful-Pointe-by-Julie-Anne-Lindsey.pdf
    • http://muicuiu.dumb1.com/1a02a00a07a05/To-Love-a-Thief-by-Julie-Anne-Long.pdf
    • http://muicuiu.dumb1.com/1a01a02a08a07a00/Rage-A-Love-Story-by-Julie-Anne-Peters.pdf
    • http://muicuiu.dumb1.com/2a00a08a05a01a03/Escape-From-The-Forbidden-Planet-by-Julie-Anne-Grasso.pdf
    • http://muicuiu.dumb1.com/7a03a01a07a03a08/Companion-to-Baroque-Music-by-Julie-Anne-Sadie.pdf
    • http://muicuiu.dumb1.com/7a07a09a00a03a03/NU-Soul-Album-de-NU-Soul-Artiste-de-Neo-Soul-Tournee-de-NU-Soul-Alicia-Keys-Liste-Des-Recompenses-Et-Nominations-D-Alicia-Keys-Mama-s-Gun-the-Diary-of-Alicia-Keys-Common-Corinne-Bailey-Rae-Unplugged-D-Angelo-Lauryn-Hill-Neo-Soul-by-Source-Wikipedia.pdf
    • http://muicuiu.dumb1.com/3a06a03a05a03a07/Post-Apocal

Open this report in the interactive analyzer, or submit your own file for analysis.