Malicious PDF — malware analysis report

Static analysis result for SHA-256 aa38e85128dfac9f…

MALICIOUS

PDF

20.7 KB Created: 2019-04-30 03:33:26 +01:00 Authoring application: mPDF 5.7
MD5: 963cdb67b142518f48aad391f57bc6b8 SHA-1: a2a3edf53ffe8240d21814a6a0bce25e7c926df4 SHA-256: aa38e85128dfac9f8c48463c9ac8bb125ca0fae170392f917dfee6d5b02d9852
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded external links, as indicated by the PDF_SEO_LINK_FARM heuristic. While the ML classifier flagged this as malicious, the specific URLs extracted are currently marked as benign. The primary attack pattern appears to be the creation of a link farm, potentially for SEO manipulation or to serve as a redirection mechanism to malicious sites. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/3a04a02a05a03a01/Sunshine-in-the-Delta-A-Novel-by-Erica-M-Sandifer.pdf
    • http://muicuiu.dumb1.com/4a08a08a03a04a09/Delta-Autumn-A-guide-for-First-Year-Teachers-in-the-Mississippi-Delta-by-Andrew-P-Mullins-Jr-.pdf
    • http://muicuiu.dumb1.com/7a08a03a04a06a07/Delta-Rescue-Delta-2-5-The-MacKenzie-Family-10-5-by-Cristin-Harber.pdf
    • http://muicuiu.dumb1.com/5a09a09a03a00/Delta-Retribution-Delta-1-by-Cristin-Harber.pdf
    • http://muicuiu.dumb1.com/2a01a02a06a02a00/The-Sacrifice-of-Sunshine-Girl-Haunting-of-Sunshine-Girl-3-by-Paige-McKenzie.pdf
    • http://muicuiu.dumb1.com/8a02a03a09a01a08/Halo-Fanon---The-Parkster-Bauxite-Cn-Military-Cleansing-Truth-Conan-G037-Delta-7-Division-Delta-Kanteon-System-Drakos-Galax-Solaray-in-Military-Imprisonment-Jake-G239-Jiralhanae-Jun-A266-Keonlex-Keonprimal-City-Libra-Team-M3a-S3d7-Comba-by-Source-Wikia.pdf
    • http://muicuiu.dumb1.com/5a07a03a08a02a02/The-Best-of-TARDIS-Eruditorum-by-Philip-Sandifer.pdf
    • http://muicuiu.dumb1.com/2a03a06a01a07a02/Tyler-s-Woman-by-Linda-Sandifer.pdf
    • http://muicuiu.dumb1.com/1a08a09a03a01a06/Neoreaction-a-Basilisk-by-Philip-Sandifer.pdf
    • http://muicuiu.dumb1.com/5a07a03a07a09a00/TARDIS-Eruditorum---A-Critical-History-of-Doctor-Who-Volume-1-William-Hartnell-by-Philip-Sandifer.pdf
    • http://muicuiu.dumb1.com/4a05a06/The-Haunting-of-Sunshine-Girl-The-Haunting-of-Sunshine-Girl-1-by-Paige-McKenzie.pdf
    • http://muicuiu.dumb1.com/5a07a03a08a09a09/TARDIS-Eruditorum---An-Unofficial-Critical-History-of-Doctor-Who-Volume-4-Tom-Baker-and-the-Hinchcliffe-Years-by-Philip-Sandifer.pdf
    • http://muicuiu.dumb1.com/1a00a05a01a09a09/What-Do-Women-Want-Essays-by-Erica-Jong-by-Erica-Jong.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a09a08a03/Erica-Sakurazawa-The-Aromatic-Bitters-by-Erica-Sakurazawa.pdf
    • http://muicuiu.dumb1.com/4a08a01a07a05a06/Delta-of-Venus-by-Ana-s-Nin.pdf
    • http://muicuiu.dumb1.com/1a09a07a04a08a02/Dead-on-the-Delta-Annabelle-Lee-1-by-Stacey-Jay.pdf
    • http://muicuiu.dumb1.com/2a06a02a08a09a07/Dead-on-the-Delta-Annabelle-Lee-1-by-Stacey-Jay.pdf
    • http://muicuiu.dumb1.com/8a03a06a06a05a01/Delta-Blues-by-Carolyn-Haines.pdf
    • http://muicuiu.dumb1.com/4a09a06a05a08a02/Blues-From-The-Delta-by-William-R-Ferris.pdf
    • http://muicuiu.dumb1.com/7a01a02a04a08a07/Erotica-Delta-Of-Venus-And-Little-Birds-by-Ana-s-Nin.pdf
    • http://muicuiu.dumb1.com/5a07a03a08a02a02/The-Best-of-TARDIS-Erudito

Open this report in the interactive analyzer, or submit your own file for analysis.