Malicious PDF — malware analysis report

Static analysis result for SHA-256 a5bc1d78e59c61ca…

MALICIOUS

PDF

35.5 KB Created: 2019-04-30 01:59:33 +01:00 Authoring application: mPDF 5.7
MD5: 539a6f6fbad9434e01bc38b5808dd098 SHA-1: 9c8f37e23203e1fbeba96b7f24bbeb683b740972 SHA-256: a5bc1d78e59c61cae9ee7a785be8ac449d013c3cd9bf72393eb76a19ed4cb8a2
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded URLs pointing to a single domain, muicuiu.dumb1.com. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier also flagged this PDF as malicious with a high probability. No scripts were extracted, and the document body was heavily obfuscated, preventing a deeper analysis of the immediate user-facing content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9656

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a00a05a02a04a03a03/Predigten-in-Der-Domkirche-Zu-Schwerin-Gehalten-by-Theodor-Friedrich-Dethlof-Kliefoth.pdf
    • http://muicuiu.dumb1.com/1a00a05a02a05a00a07/Predigten-in-Der-Gemeine-Zu-Ludwigslust-Gehalten-by-Theodor-Friedrich-Dethlof-Kliefoth.pdf
    • http://muicuiu.dumb1.com/1a00a01a01a00a02a01/Satyrischer-Feldzug-in-Eine-Reihe-Von-Vorlesungen-Gehalten-Zu-Berlin-Im-Winter-1813-1814-Nebst-Einer-Zueignungsschrift-an-Der-Einsiedler-in-Elba-by-Theodor-Heinrich-Friedrich.pdf
    • http://muicuiu.dumb1.com/1a00a05a02a06a09a09/Predigten-Aus-Der-Gegenwart-Gehalten-in-Der-Kieler-Universit-tsaula-by-Otto-Baumgarten.pdf
    • http://muicuiu.dumb1.com/9a05a01a08a07a08/Kaiser-Leopold-I-Und-Peter-Lambeck-Vortrag-gehalten-in-der-feierlichen-Sitzung-der-by-Theodor-Georg-von-Karajan.pdf
    • http://muicuiu.dumb1.com/9a05a01a08a08a00/Kaiser-Leopold-I-Und-Peter-Lambeck-Vortrag-Gehalten-in-Der-Feierlichen-Sitzung-Der-Kaiserlichen-Akademie-Der-Wissenschaften-Am-30-Mai-1868-by-Theodor-Georg-von-Karajan.pdf
    • http://muicuiu.dumb1.com/1a00a05a02a05a00a04/Vergangenheitsbewaltigung-Rede-an-Der-Friedrich-Schiller-Universitat-Jena-Gehalten-Am-18-5-1994-by-Alfred-Grosser.pdf
    • http://muicuiu.dumb1.com/1a00a05a02a05a00a02/Goethe-und-Italien-Vortrage-anlasslich-des-deutsch-italienischen-Symposiums-am-22-November-1982-gehalten-in-der-Rheinischen-Friedrich-Wilhelms-Universitat-Politeia-by-Pietro-Citati.pdf
    • http://muicuiu.dumb1.com/1a01a08a04a06a07a00/Beethoven-Und-Der-Deutsche-Idealismus-Rede-Gehalten-Beim-Festakt-Zur-Feier-Der-150-Wiederkehr-Des-Geburtstages-Ludwig-Van-Beethovens-an-Der-Vereinigten-Friedrich-Universit-t-Halle-Wittenberg-Am-16-Dezember-1920-by-Arnold-Schering.pdf
    • http://muicuiu.dumb1.com/1a00a01a05a04a02a09/Briefe-Herrmann-Theodor-Goltdammers-an-Karl-Josef-Anton-Mittermaier-Juristische-Briefwechsel-Des-19-Jahrhunderts-by-Theodor-Goltdammer.pdf
    • http://muicuiu.dumb1.com/1a00a07a04a02a06a00/Briefwechsel-Christian-F-rchtegott-Gellert-s-Mit-Demoiselle-Lucius-Nebst-Einem-Anhange-Enthaltend-1-Eine-Rede-Gellert-s-Gehalten-VOR-Dem-Churf-rsten-in-Leipzig-2-Ein-Gedicht-Gellert-s-an-Den-Churf-rsten-3-Ein-Brief-Rabener-s-an-Gellert-Und-Dess-by-Friedrich-Adolf-Ebert.pdf
    • http://muicuiu.dumb1.com/1a00a03a09a01a00a04/Domaniale-Verhaltnisse-in-Mecklenburg-Schwerin-by-C-W-a-Balck.pdf
    • http://muicuiu.dumb1.com/1a00a03a09a02a01a03/Domaniale-Verhaltnisse-in-Mecklenburg-Schwerin-Band-1-2-by-C-W-a-Balck.pdf
    • http://muicuiu.dumb1.com/1a01a07a00a05a09a07/Die-Zehn-Gebote-In-Predigten-Ausgelegt-by-Gerhard-Ebeling.pdf
    • http://muicuiu.dumb1.com/8a06a05a00a03a03/Von-Gott-erz-hlen-Familiengottesdienste-mit-Predigten-f-r-Kinder-by-Thomas-Hieke.pdf
    • http://muicuiu.dumb1.com/1a00a05a06a09a09a09/Solon-in-Lydien-Herzl-Theodor-by-Theodor-Herzl.pdf
    • http://muicuiu.dumb1.com/1a00a05a06a09a02a08/Theodor-Herzl---Gesammelte-Werke-by-Theodor-Herzl.pdf
    • http://muicuiu.dumb1.com/9a03a00a03a00a08/Freies-Christenthum-Dargelegt-in-Predigten-Und-Betrachtungen-Protestantischer-Geistlicher-by-Conrad-Wilhelm-Kambli.pdf
    • http://muicuiu.dumb1.com/1a01a01a09a04a05a05/Friedrich-Von-Hagedorn-Poetische-Werke-Vol-1-of-5-Mit-Seiner-Lebensbeschreibung-Und-Charakteristik-Und-Mit-Ausz-gen-Seines-Briefwechsels-Lehrgedichte-Und-Epigramme-by-Friedrich-von-Hagedorn.pdf
    • http://muicuiu.dumb1.com/8a09a06a04a09a00/Die-Spinnerinn-Am-Kreuz-Romantisches-Schauspiel-in-Vier-Aufzugen-Nebst-Einem-Vorspiele-Das-Losegeld-Von-Friedrich-August-Kanne-by-Friedrich-Kanne.pdf
    • http://muicuiu.dumb1.com/1a00a05a02a06a09a09/Predigten-Aus-Der-Gegenwart-Gehalten-in-Der-Kieler-Universit-tsaula-by-Otto-Bau

Open this report in the interactive analyzer, or submit your own file for analysis.