Malicious PDF — malware analysis report

Static analysis result for SHA-256 b28b3ed589ec31b7…

MALICIOUS

PDF

20.8 KB Created: 2019-11-08 03:45:43 +00:00 Authoring application: mPDF 5.7
MD5: fa4e04d632d5d97da91dfe12fbabab59 SHA-1: fc73197222b500ae64f4149a7087f5326f4180f8 SHA-256: b28b3ed589ec31b7ee1f108a2d380ca30b290250e98ea4760f64d955024cba11
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded links pointing to external PDF files hosted on the domain 'cefasfese.4pu.com'. This pattern is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier strongly supports the malicious verdict. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/4737731730731730/Oliver-s-Story-by-Erich-Segal.pdf
    • http://cefasfese.4pu.com/6737735732730/Only-Love-by-Erich-Segal.pdf
    • http://cefasfese.4pu.com/4731733730739/Acts-of-Faith-by-Erich-Segal.pdf
    • http://cefasfese.4pu.com/5737732734736732/The-Death-of-Comedy-by-Erich-Segal.pdf
    • http://cefasfese.4pu.com/5737732734731737/Roman-Laughter-The-Comedy-of-Plautus-by-Erich-Segal.pdf
    • http://cefasfese.4pu.com/5737732733739738/Erich-Segal-A-Critical-Companion-by-Linda-C-Pelzer.pdf
    • http://cefasfese.4pu.com/5737732734735737/Stages-The-Art-And-Adventures-Of-Zohra-Segal-by-Zohra-Segal.pdf
    • http://cefasfese.4pu.com/2734730739739735/A-Time-to-Love-and-a-Time-to-Die-by-Erich-Maria-Remarque.pdf
    • http://cefasfese.4pu.com/6737737735732734/Pierrot-Lunaire-Albert-Giraud-Otto-Erich-Hartleben-Arnold-Schoenberg-Une-Collection-D-etudes-Musico-Litt-eraires-A-Collection-Of-Musicological-And-Literary-Studies-Eine-Sammlung-Musik-Und-Literaturwissenschaftlicher-Beitr-age-by-Otto-Erich-Hartleben.pdf
    • http://cefasfese.4pu.com/1739738736730738/Young-Love-Part-1-A-School-Yard-Love-Story-by-Dean-Amory.pdf
    • http://cefasfese.4pu.com/9739736731734736/Love-Beyond-Limits-A-Southern-Love-Story-Among-the-Fair-Magnolias-by-Elizabeth-Musser.pdf
    • http://cefasfese.4pu.com/2735735731737738/The-Heart-of-a-Soldier-A-True-Love-Story-of-Love-War-and-Sacrifice-by-Kate-Blaise.pdf
    • http://cefasfese.4pu.com/1731732735738738734/Lydia-s-First-Love-An-Amish-Love-Story-The-Byler-Girl-Series-Book-1-by-Emma-Joy-Widders.pdf
    • http://cefasfese.4pu.com/7735733732739737/Love-Conquers-All-Briana-amp-Kingston-s-Love-Story-by-Bianca.pdf
    • http://cefasfese.4pu.com/7730734734734732/Find-Her-Keep-Her-A-Martha-s-Vineyard-Love-Story-Love-in-the-USA-1-by-Z-L-Arkadie.pdf
    • http://cefasfese.4pu.com/1736731734739734/Love-Me-When-I-m-Gone-The-true-story-of-life-love-and-loss-for-a-Green-Beret-in-post-9-11-war-by-Robert-Patrick-Lewis.pdf
    • http://cefasfese.4pu.com/1732738731730732/Touchable-Love-An-Untraditional-Love-Story-by-Becky-Due.pdf
    • http://cefasfese.4pu.com/3738736736731735/Love-Story-Love-Unexpectedly-3-by-Lauren-Layne.pdf
    • http://cefasfese.4pu.com/3731731736734730/Touchable-Love-An-Untraditional-Love-Story-by-Becky-Due.pdf
    • http://cefasfese.4pu.com/4731731733739738/Unyielding-Love---Nick-amp-Bee-s-Story-Vol-1-Indelible-Love-4-by-D-W-Cee.pdf
    • http://cefasfese.4pu.com/6737737735732734/Pierrot-Lunaire-Albert-Giraud-Otto-Erich-Hart

Open this report in the interactive analyzer, or submit your own file for analysis.