Malicious PDF — malware analysis report

Static analysis result for SHA-256 a4209d9e4781e1dc…

MALICIOUS

PDF

18.1 KB Created: 2019-04-30 05:21:21 +01:00 Authoring application: mPDF 5.7
MD5: b7e12785269b8d1e6846edfd148fe02c SHA-1: b364520e3986be2ccad88600ce75edb4366aa47a SHA-256: a4209d9e4781e1dc7e99182a71160fbbb69c11413e84a36499d8be2f2a591230
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF document contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. While the specific URLs appear benign, the sheer volume and structure suggest a link farm designed to direct users to potentially malicious content. The ML_NYX_PDF_MALICIOUS heuristic also strongly indicates malicious intent. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9931

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/7a00a05a02a06a05/All-Good-Deeds-Lucy-Kendall-1-by-Stacy-Green.pdf
    • http://muicuiu.dumb1.com/1a01a06a03a08a03a00/See-Them-Run-Lucy-Kendall-2-by-Stacy-Green.pdf
    • http://muicuiu.dumb1.com/2a06a08a05a00/No-Good-Deeds-Tess-Monaghan-9-by-Laura-Lippman.pdf
    • http://muicuiu.dumb1.com/3a00a09a05a06a09/Into-the-Dark-by-Stacy-Green.pdf
    • http://muicuiu.dumb1.com/3a05a05a03a09a04/The-World-According-to-Tom-Hanks-The-Life-the-Obsessions-the-Good-Deeds-of-America-s-Most-Decent-Guy-by-Gavin-Edwards.pdf
    • http://muicuiu.dumb1.com/5a00a04a01a02/Tin-God-Delta-Crossroads-Trilogy-1-by-Stacy-Green.pdf
    • http://muicuiu.dumb1.com/5a07a05a07a08a02/Green-Events-and-Green-Tourism-An-International-Guide-to-Good-Practice-by-Hugues-S-raphin.pdf
    • http://muicuiu.dumb1.com/6a00a05a01a07a05/Three-Good-Giants-Whose-Famous-Deeds-Are-Recorded-in-the-Ancient-Chronicles-of-Francois-Rebelais-1887-by-Fran-ois-Rabelais.pdf
    • http://muicuiu.dumb1.com/4a05a01a01a07a04/No-Good-Deed-Lucy-Kincaid-10-by-Allison-Brennan.pdf
    • http://muicuiu.dumb1.com/1a01a06a03a09a04a03/Kendall-Kendall-Book-5-by-John-Holt.pdf
    • http://muicuiu.dumb1.com/8a05a01a08a07a05/The-Ultimate-Green-Tea-Guide-History-Green-Tea-Benefits-Green-Tea-Types-Best-Brewing-Practices-and-Tasty-Green-Tea-Recipes-for-Everyone-by-Ayumi-Furuya.pdf
    • http://muicuiu.dumb1.com/1a01a00a02a08a09a03/Good-Friends-Good-Guns-Good-Whiskey-Selected-Works-Vol-1-by-Skeeter-Skelton.pdf
    • http://muicuiu.dumb1.com/2a09a05a01a08a08/The-Lucy-Family-Alphabet-by-Judith-Lucy.pdf
    • http://muicuiu.dumb1.com/2a05a01a09a03a02/We-Love-Lucy-by-Lucy-Felthouse.pdf
    • http://muicuiu.dumb1.com/3a00a03a03a08a09/George-s-Cosmic-Treasure-Hunt-Lucy-amp-Stephen-Hawking-by-Lucy-Hawking.pdf
    • http://muicuiu.dumb1.com/7a00a05a02a09a01/Dirty-Deeds-by-Armand-Rosamilia.pdf
    • http://muicuiu.dumb1.com/3a09a02a03a08a06/Dirty-Deeds-by-Jacqueline-M-Sinclair.pdf
    • http://muicuiu.dumb1.com/4a06a09a00a06a03/Dirty-Deeds-by-Lorelei-James.pdf
    • http://muicuiu.dumb1.com/7a00a05a03a09a01/The-Origin-and-Deeds-of-the-Goths-by-Jordanes.pdf
    • http://muicuiu.dumb1.com/7a00a05a04a00a01/Wicked-Deeds-by-Jenika-Snow.pdf
    • http://muicuiu.dumb1.com/5a07a05a07a08a02/Green-Events-and-Green-Tourism-An-International-G

Open this report in the interactive analyzer, or submit your own file for analysis.