Malicious PDF — malware analysis report

Static analysis result for SHA-256 a79738104b969bd2…

MALICIOUS

PDF

19.1 KB Created: 2020-03-18 21:30:28 +00:00 Authoring application: mPDF 5.7
MD5: 2c5bf3a53393ef767ae1ae17cf6299a8 SHA-1: 15573e1412fd03e0df5c5eb5c3c7c4fbdf22fef0 SHA-256: a79738104b969bd2381c8417504ad4ababa1aa1933f5ca2066a9f995309dd0cb
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this PDF as malicious with high confidence. The primary attack pattern appears to be the creation of a link farm, likely for SEO manipulation or to redirect users to potentially malicious content hosted at the numerous URLs. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9940

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://rtuninnsi.myhome.cx/16a16a36a76a16a26a5/Liebe-ist-auch-Verzeihen-Jessica-Stein-Reihe-by-Jessica-Stein.pdf
    • http://rtuninnsi.myhome.cx/26a76a46a66a56a1/Stein-on-Writing-A-Master-Editor-of-Some-of-the-Most-Successful-Writers-of-Our-Century-Shares-His-Craft-Techniques-and-Strategies-by-Sol-Stein.pdf
    • http://rtuninnsi.myhome.cx/16a16a46a16a36a56a7/Der-Gasthof-Zur-Silbernen-Taube-Komischer-Roman-in-Drei-Buchern-Von-Karl-Stein-by-Karl-Stein.pdf
    • http://rtuninnsi.myhome.cx/76a16a66a96a56a4/Gertrude-Stein-Gertrude-Stein-Gertrude-Stein-by-Marty-Martin.pdf
    • http://rtuninnsi.myhome.cx/76a26a16a36a46a8/Wellengefl-ster-II-Neue-Seeg-nge-mit-Brina-Stein-by-Brina-Stein.pdf
    • http://rtuninnsi.myhome.cx/76a16a76a06a46a2/Edith-Stein-Essential-Writings-by-Edith-Stein.pdf
    • http://rtuninnsi.myhome.cx/56a06a16a66a96a1/Rick-Stein-s-Far-Eastern-Odyssey-by-Rick-Stein.pdf
    • http://rtuninnsi.myhome.cx/76a16a76a06a46a0/Gertrude-Stein-Selections-by-Gertrude-Stein.pdf
    • http://rtuninnsi.myhome.cx/56a56a66a66a96a4/The-Heart-of-the-Rougarou-The-Secret-of-Wolf-River-1-by-Jessica-Musso-Jessica-Lupo-.pdf
    • http://rtuninnsi.myhome.cx/46a16a36a46a26a6/Lessons-from-Jessica-Ultimate-Caregiving-Growing-Up-with-Jessica-2-by-James-Walker.pdf
    • http://rtuninnsi.myhome.cx/46a86a76a96a7/The-Wedding-of-Antanasia-Jessica-Packwood-and-Lucius-Valeriu-Vladescu-Jessica-1-5-by-Beth-Fantaskey.pdf
    • http://rtuninnsi.myhome.cx/46a56a06a86a7/Jessica-Rules-the-Dark-Side-Jessica-2-by-Beth-Fantaskey.pdf
    • http://rtuninnsi.myhome.cx/16a16a36a76a16a46a0/Liebe-Hoffnung-und-Verzeihen-by-Helen-Brooks.pdf
    • http://rtuninnsi.myhome.cx/16a16a36a76a16a36a3/Das-Verzeihen-in-der-Liebe-Wie-Paare-neue-N-he-finden-by-Michael-C-llen.pdf
    • http://rtuninnsi.myhome.cx/86a36a96a56a56a1/Ada-by-Gertrude-Stein.pdf
    • http://rtuninnsi.myhome.cx/16a26a36a76a86a7/Run-to-You-by-Charlotte-Stein.pdf
    • http://rtuninnsi.myhome.cx/46a76a56a36a16a0/Tiny-Tim-by-Harry-Stein.pdf
    • http://rtuninnsi.myhome.cx/26a86a86a96a56a5/How-to-Write-by-Gertrude-Stein.pdf
    • http://rtuninnsi.myhome.cx/16a46a56a56a16a0/Control-by-Charlotte-Stein.pdf
    • http://rtuninnsi.myhome.cx/16a26a66a26a76a6/Pale-Bricks-by-K-L-Stein.pdf
    • http://rtuninnsi.myhome.cx/56a06a16a66a96a1/Rick-Stein-s-Far-Eastern-Odyssey-by-Rick-Stein.p

Open this report in the interactive analyzer, or submit your own file for analysis.