Malicious PDF — malware analysis report

Static analysis result for SHA-256 b0cd770ba171212f…

MALICIOUS

PDF

15.4 KB Created: 2019-05-04 05:38:14 +01:00 Authoring application: mPDF 5.7
MD5: 9bd548bf7cfff5f0d51371985a9c6aab SHA-1: 63105e46e370078a50384ce26f71dec151ee8eee SHA-256: b0cd770ba171212fdbcda27c7f69c0f73369ec92c43d66e58a6b4b3451c6ae39
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, which suggests a link farm or traffic distribution scheme. The ML_NYX_PDF_MALICIOUS heuristic also flagged this PDF with high confidence. While the document body is unreadable, the presence of numerous links to external PDF files indicates a likely attempt to direct users to potentially malicious content or websites.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9880

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/3732734731730/The-Eye-of-the-World-Wheel-of-Time-1-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/1737737739738737/The-Eye-of-the-World-Wheel-of-Time-1-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/3736737737734737/New-Spring-Wheel-of-Time-0-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/2730739738738736/The-Great-Hunt-Wheel-of-Time-2-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/2732732731732730/The-Great-Hunt-Wheel-of-Time-2-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/3735739738736734/A-Memory-of-Light-Wheel-of-Time-14-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/3733734736732/Lord-of-Chaos-Wheel-of-Time-6-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/2732732735732730/Lord-of-Chaos-Wheel-of-Time-6-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/4734734734738737/Winter-s-Heart-Wheel-of-Time-9-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/3733730734730/The-Shadow-Rising-Wheel-of-Time-4-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/3733730738731/The-Great-Hunt-Wheel-of-Time-2-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/3737738734738734/The-Path-of-Daggers-Wheel-of-Time-8-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/3734732737732/Winter-s-Heart-Wheel-of-Time-9-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/5739736732731734/El-Se-or-del-Caos-Wheel-of-Time-6-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/9730733737739737/New-Spring-The-Wheel-of-Time-Prequel---Audible-Edition-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/7733735734733734/The-Wheel-of-Time-Reread-Redux-The-Strike-at-Shayol-Ghul-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/3737737734736739/A-Memory-Of-Light-Wheel-of-Time-14-A-Memory-of-Light-3-by-Robert-Jordan.pdf
    • http://cefasfese.4pu.com/3739732730730731/The-Wheel-of-Time-Kalachakra-in-Context-by-Lhundub-Sopa.pdf
    • http://cefasfese.4pu.com/2733732735734735/Wheel-Around-the-World-A-Collection-of-Poems-by-Chris-Searle.pdf
    • http://cefasfese.4pu.com/7739735732737731/Novels-1930-1942-Dance-Night-Come-Back-to-Sorrento-Turn-Magic-Wheel-Angels-on-Toast-A-Time-to-Be-Born-by-Dawn-Powell.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.