Malicious PDF — malware analysis report

Static analysis result for SHA-256 a8763fc1dfec5739…

MALICIOUS

PDF

18.1 KB Created: 2019-09-06 07:56:18 +01:00 Authoring application: mPDF 5.7 First seen: 2020-12-28
MD5: 9754f54928efdae4b680225c58000d3e SHA-1: 65fa80b81a51152f03d7c9ee6bc2ec4d08af2898 SHA-256: a8763fc1dfec5739536990453b8dfef0c21c86b63421471d35adae588ed1bdbd
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to external PDF files, a technique often used for SEO manipulation or to host malicious content. While the URLs themselves are currently flagged as benign, the sheer volume and the heuristic firing of 'PDF_SEO_LINK_FARM' indicate a suspicious pattern. No scripts were extracted, but the presence of embedded URLs suggests a potential for redirecting users to malicious sites.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9788

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/8735737738735739/Anne-of-Windy-Poplars-Anne-s-House-of-Dreams-Anne-of-Ingleside-Anne-of-Green-Gables-4-6-by-L-M-Montgomery.pdf In PDF document text
    • http://cefasfese.4pu.com/7735731737739/Against-the-Wall-Against-the-Wall-1-by-Julie-Prestsater.pdfIn PDF document text
    • http://cefasfese.4pu.com/2735738739733/The-Wall-of-the-Sky-the-Wall-of-the-Eye-by-Jonathan-Lethem.pdfIn PDF document text
    • http://cefasfese.4pu.com/2730739730730732/Catching-the-Wolf-of-Wall-Street-More-Incredible-True-Stories-of-Fortunes-Schemes-Parties-and-Prison-The-Wolf-of-Wall-Street-2-by-Jordan-Belfort.pdfIn PDF document text
    • http://cefasfese.4pu.com/2738738731733/Black-Sea-Gods-Chronicles-of-Fu-Xi-1-by-Brian-Braden.pdfIn PDF document text
    • http://cefasfese.4pu.com/2737733734730732/The-Burning-A-Chapter-in-My-Life-by-Braden-Lloyd.pdfIn PDF document text
    • http://cefasfese.4pu.com/3738734736736732/Anything-but-a-Gentleman-Rescued-from-Ruin-8-by-Elisa-Braden.pdfIn PDF document text
    • http://cefasfese.4pu.com/3736735732733735/Love-in-Reality-The-Blackjack-Quartet-1-by-Magdalen-Braden.pdfIn PDF document text
    • http://cefasfese.4pu.com/4730732732730733/The-Kindling-Middle-School-Magic-1-by-Braden-Bell.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730733737730739732/The-Cost-of-Happiness-The-Blackjack-Quartet-2-by-Magdalen-Braden.pdfIn PDF document text
    • http://cefasfese.4pu.com/1737730739732732/Tied-Up-In-Knotts-Braden-Security-1-by-Dale-Cadeau.pdfIn PDF document text
    • http://cefasfese.4pu.com/2736733735735735/Ferris-Braden-Beyond-the-Marius-Brothers-6-by-Joyee-Flynn.pdfIn PDF document text
    • http://cefasfese.4pu.com/3738733734731733/Confessions-of-a-Dangerous-Lord-Rescued-from-Ruin-7-by-Elisa-Braden.pdfIn PDF document text
    • http://cefasfese.4pu.com/6730733737732/The-God-Code-The-Secret-of-Our-Past-the-Promise-of-Our-Future-by-Gregg-Braden.pdfIn PDF document text
    • http://cefasfese.4pu.com/2734736730738735/The-Devil-Is-a-Marquess-Rescued-from-Ruin-Book-4-by-Elisa-Braden.pdfIn PDF document text
    • http://cefasfese.4pu.com/1734738739730735/Twelve-Nights-as-His-Mistress-Rescued-from-Ruin-6-by-Elisa-Braden.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730734733731732/The-Divine-Matrix-Bridging-Time-Space-Miracles-and-Belief-by-Gregg-Braden.pdfIn PDF document text
    • http://cefasfese.4pu.com/3735731731730737/The-Fantasy-World-of-Josephine-Wall-by-Josephine-Wall.pdfIn PDF document text
    • http://cefasfese.4pu.com/2730732736734736/Love-at-Last-A-Braden-Flirt-Love-in-Bloom-The-Bradens-at-Peaceful-Harbor-Volume-7-by-Melissa-Foster.pdfIn PDF document text
    • http://cefasfese.4pu.com/1732735731731733/The-Devil-s-Concubine-The-Devil-of-Ponong-series-1-by-Jill-Braden.pdfIn PDF document text