Malicious PDF — malware analysis report

Static analysis result for SHA-256 a6288d3a431b7996…

MALICIOUS

PDF

22.7 KB Created: 2019-05-01 20:13:38 +01:00 Authoring application: mPDF 5.7
MD5: df65d078532eb6fc7c5a261a36d6d04f SHA-1: b0c479a4109c3eabe0bc30a5009097e0e715621d SHA-256: a6288d3a431b79962a5c5282659ceb1f3e17f822275c2d721ff04e61ba7f6d09
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF document was flagged by a machine learning classifier and contains a large number of embedded external links, a technique often used for SEO spam or to distribute malicious content. The heuristic 'PDF_SEO_LINK_FARM' indicates a mass of external links, with the first identified URL being http://kiteeearpdf.myhome.cx/1f210f219f217f219f217f213/W-lfe-Seer-uber---Entf-hrung-seiner-Geliebten-mit-seiner-Bande-der-W-lfe-by-Jenna-Ash-Lee.pdf. No scripts were extracted, but the structure suggests a delivery mechanism for further malicious activity.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://kiteeearpdf.myhome.cx/1f210f219f217f219f217f213/W-lfe-Seer-uber---Entf-hrung-seiner-Geliebten-mit-seiner-Bande-der-W-lfe-by-Jenna-Ash-Lee.pdf
    • http://kiteeearpdf.myhome.cx/1f211f216f215f210f219f211/Goethe-in-Der-Epoche-Seiner-Vollendung-1805-1832-Versuch-Einer-Darstellung-Seiner-Denkweise-Und-Weltbetrachtung-by-Otto-Harnack.pdf
    • http://kiteeearpdf.myhome.cx/1f211f216f215f210f219f217/Goethe-in-Der-Epoche-Seiner-Vollendung-1805-1832-Versuch-Einer-Darstellung-Seiner-Denkweise-Und-Weltbetrachtung-Classic-Reprint-by-Otto-Harnack.pdf
    • http://kiteeearpdf.myhome.cx/1f211f216f215f210f219f218/Goethe-in-Der-Epoche-Seiner-Vollendung-1805-1832-Versuch-Einer-Darstellung-Seiner-Denkweise-Und-Weltbetrachtung-Classic-Reprint-by-Otto-Harnack.pdf
    • http://kiteeearpdf.myhome.cx/1f211f218f212f217f215f213/Untersuchungen-Uber-Goethes-Faust-in-Seiner-Altesten-Gestalt-by-J-Collin.pdf
    • http://kiteeearpdf.myhome.cx/9f215f218f219f215f219/Carl-Friedrich-Christian-Fasch-1736-1800-Und-Das-Berliner-Musikleben-Seiner-Zeit-Bericht-Uber-Die-Internationale-Wissenschaftliche-Konferenz-Am-16-by-Konstanze-Musketa.pdf
    • http://kiteeearpdf.myhome.cx/9f214f211f215f217f212/Goethe-in-Seiner-Epoche-Zw-lf-Versuche-by-Christoph-Perels.pdf
    • http://kiteeearpdf.myhome.cx/2f212f217f211f210f214/Der-Erfahrbare-Atem-in-seiner-Substanz-by-Ilse-Middendorf.pdf
    • http://kiteeearpdf.myhome.cx/9f215f215f219f213f215/Der-Struwwelpeter-in-seiner-ersten-Gestalt-by-Heinrich-Hoffmann.pdf
    • http://kiteeearpdf.myhome.cx/1f210f210f216f215f211f219/Das-Dunkel-seiner-Seele-by-Ethan-Parker-Wilde.pdf
    • http://kiteeearpdf.myhome.cx/1f211f212f214f215f215f212/Mozart---Die-R-tsel-seiner-Zauberfl-te-by-Hanskarl-K-lsch.pdf
    • http://kiteeearpdf.myhome.cx/8f217f213f216f211f210/Nikolaus-von-Kues-in-seiner-Zeit-ein-Essay-by-Kurt-Flasch.pdf
    • http://kiteeearpdf.myhome.cx/1f211f219f218f212f213f211/Yoga---Entspannung-in-seiner-Vielfalt-by-Erna-Hildegard-D-Nigus.pdf
    • http://kiteeearpdf.myhome.cx/9f215f215f216f214f215/The-Captain-s-Lover---Sklave-seiner-Sehnsucht-by-Inka-Loreen-Minden.pdf
    • http://kiteeearpdf.myhome.cx/1f210f216f215f218f213f215/Einfach-genial-sein-Die-Essenz-seiner-Lehren-by-Kurt-Tepperwein.pdf
    • http://kiteeearpdf.myhome.cx/8f217f215f214f217f219/Das-Deutsche-Rathaus-Im-Mittelalter-In-Seiner-Entwickelung-Geschildert-by-Otto-Stiehl.pdf
    • http://kiteeearpdf.myhome.cx/1f211f212f217f216f218f219/Stiefvaters-Beichte-Verdorbene-Geschichten-vom-Stiefvater-und-seiner-Stieftochter-by-S-M-Grey.pdf
    • http://kiteeearpdf.myhome.cx/1f210f217f216f215f215f216/Fremd--Und-Selbstwahrnehmung-Goethes-in-Seiner--Italienischen-Reise--by-Kristina-Keller.pdf
    • http://kiteeearpdf.myhome.cx/1f211f213f213f211f218f212/Der-Plazentare-Stoffaustausch-in-Seiner-Physiologischen-Und-Pathologischen-Bedeutung-by-Erwin-Kehrer.pdf
    • http://kiteeearpdf.myhome.cx/9f218f216f218f210f210/Verh-r-und-Uhrzeit-Der-Krimi-in-seiner-Schleife-by-Raymond-Wallace-Klausens.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.