Malicious PDF — malware analysis report

Static analysis result for SHA-256 a8164b6fdb1acf36…

MALICIOUS

PDF

26.3 KB Created: 2019-04-30 04:13:40 +01:00 Authoring application: mPDF 5.7
MD5: eb5d8c5dead59bdb8e97b0e3f9aa1989 SHA-1: 0f1010d9c0f24ddf7ca9841e6edac024458b218a SHA-256: a8164b6fdb1acf36ab643a9ca2aaa5bc82f042efd4097cfceeba92e34965476f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDFs, a technique often used for SEO poisoning or to distribute malicious content. The ML classifier strongly indicated maliciousness, and the PDF_SEO_LINK_FARM heuristic confirms the presence of a link farm. While the URLs themselves are currently marked as benign, the sheer volume and suspicious domain suggest a malicious intent to redirect users.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9716

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://leakscaioiobook.4dq.com/1d0c1d0c9d0c5d0c6d0c9d0c2/Digitale-Kompetenz-Was-die-Schule-dazu-beitragen-kann-by-Alois-Hundertpfund.pdf
    • http://leakscaioiobook.4dq.com/7d0c6d0c4d0c9d0c3d0c0/Totto-chan-So-wunderbar-kann-Schule-sein-by-Tetsuko-Kuroyanagi.pdf
    • http://leakscaioiobook.4dq.com/9d0c3d0c9d0c8d0c7d0c9/Digitale-Bildbearbeitung-F-r-Fotografen-Was-Fotografen-in-Photoshop-Beherrschen-Sollten-Was-Sie-Ber-Das-Digitale-Bild-Und-Ber-Colormanagement-Wissen-M-ssen-by-Wolfgang-Pfaffe.pdf
    • http://leakscaioiobook.4dq.com/9d0c3d0c9d0c8d0c8d0c1/Digitale-Bildbearbeitung-f-r-Fotografen-Was-Fotografen-in-Photoshop-beherrschen-sollten-was-sie-ber-das-digitale-Bild-und-ber-Colormanagement-wissen-m-ssen-by-Wolfgang-Pfaffe.pdf
    • http://leakscaioiobook.4dq.com/1d0c0d0c4d0c6d0c2d0c2d0c9/Leben-Mit-Medien---Lernen-Mit-Medien-Fallstudien-Zum-Medienpaedagogischen-Handeln-in-Der-Schule-Projekt--Medienerziehung-in-Der-Schule--Forschungsbericht-Teil-2-by-Rudolf-Biermann.pdf
    • http://leakscaioiobook.4dq.com/1d0c1d0c8d0c1d0c0d0c6d0c5/Soziale-Kompetenz-in-der-postindustriellen-Gesellschaft-Einsch-tzung-ihrer-praktischen-Relevanz-und-gesellschaftlichen-Funktion-by-Melanie-M-Nnich.pdf
    • http://leakscaioiobook.4dq.com/1d0c1d0c9d0c5d0c6d0c9d0c3/-mit-allem-was-dazu-geh-rt-by-Edwin-Cordell.pdf
    • http://leakscaioiobook.4dq.com/1d0c1d0c9d0c5d0c7d0c5d0c8/Wie-Sie-andere-dazu-bringen-das-zu-tun-was-Sie-wollen-by-Kishor-Sridhar.pdf
    • http://leakscaioiobook.4dq.com/1d0c1d0c9d0c5d0c6d0c1d0c6/A-Galaxy-of-Dazu-rocks-Carvings-of-China-by-Wang-Qingyu.pdf
    • http://leakscaioiobook.4dq.com/1d0c1d0c9d0c5d0c7d0c0d0c1/Willensfreiheit---Was-sagt-die-Theologie-dazu-sciebooks-by-Wolfgang-Achtner.pdf
    • http://leakscaioiobook.4dq.com/1d0c0d0c2d0c7d0c1d0c4d0c2/Ich-kann-schon-alleine-lesen---Eine-Hexe-im-Klassenzimmer-Ich-kann-schon-alleine-lesen---Band-7-by-Ingrid-Uebe.pdf
    • http://leakscaioiobook.4dq.com/9d0c0d0c9d0c1d0c4d0c7/Alois-Riedl-by-Alois-Riedl.pdf
    • http://leakscaioiobook.4dq.com/6d0c1d0c3d0c1d0c4d0c5/Le-Sens-commun-by-Editions-la-Biblioth-que-Digitale.pdf
    • http://leakscaioiobook.4dq.com/9d0c0d0c9d0c2d0c0d0c1/Leonardo-s-Hands-by-Alois-Hotschnig.pdf
    • http://leakscaioiobook.4dq.com/9d0c0d0c9d0c0d0c7d0c3/The-Riding-Teacher-by-Alois-Podhajsky.pdf
    • http://leakscaioiobook.4dq.com/6d0c8d0c7d0c0d0c8d0c9/Etica-versione-digitale-con-ipertesti-by-Baruch-Spinoza.pdf
    • http://leakscaioiobook.4dq.com/9d0c3d0c5d0c0d0c8d0c4/Fotografare-Come-ottenere-immagini-pefette-con-la-macchina-digitale-by-Tom-Ang.pdf
    • http://leakscaioiobook.4dq.com/6d0c8d0c7d0c1d0c1d0c5/Cryptocoins-Investieren-in-digitale-W-hrungen-by-Aaron-Koenig.pdf
    • http://leakscaioiobook.4dq.com/6d0c8d0c7d0c1d0c2d0c8/Sonoma-squares---murder-mistery-by-Robert-Digitale.pdf
    • http://leakscaioiobook.4dq.com/8d0c0d0c2d0c8d0c3d0c4/Transformation-digitale-l-av-nement-des-plateformes-by-Gilles-Babinet.pdf
    • http://leakscaioiobook.4dq.com/9d0c3d0c9d0c8d0c8d0c1/Digitale-Bildbearbeitung-f-r-Fotografen-Was-Fotografen-in-Photoshop-beherrschen-sollten-was-sie-ber-das-digitale-Bild-und-ber-Colormana

Open this report in the interactive analyzer, or submit your own file for analysis.