Malicious PDF — malware analysis report

Static analysis result for SHA-256 b4f3410f62e41f8c…

MALICIOUS

PDF

18.3 KB Created: 2019-04-30 04:54:41 +01:00 Authoring application: mPDF 5.7
MD5: 8f6fda6972087c0a117af4eeb18afcf1 SHA-1: 1a3a82f2ee8888bf63dcacdeb7b0eac9b65833fb SHA-256: b4f3410f62e41f8c59e2a124fa791f6357a74d6b45321a3997e0b2f10d9046a2
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDF documents, forming a link farm. This is indicative of a SEO poisoning or spamming attack, aiming to drive traffic to specific sites. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9775

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/3a02a01a04a02a01/The-Widows-Guild-Francis-Bacon-Mystery-3-by-Anna-Castle.pdf
    • http://muicuiu.dumb1.com/7a03a01a02a03a06/Golden-Lads-Sir-Francis-Bacon-Anthony-Bacon-and-Their-Friends-by-Daphne-du-Maurier.pdf
    • http://muicuiu.dumb1.com/8a01a05a00a00a05/Certaine-Miscellany-Works-of-the-Right-Honovrable-Francis-Lo-Verulam-Viscount-S-Alban-by-Francis-Bacon.pdf
    • http://muicuiu.dumb1.com/8a09a09a04a02a08/Moriarty-Meets-His-Match-A-Professor-amp-Mrs-Moriarty-Mystery-1-by-Anna-Castle.pdf
    • http://muicuiu.dumb1.com/7a02a03a05a03a04/The-Major-Works-by-Francis-Bacon.pdf
    • http://muicuiu.dumb1.com/6a00a03a01a03a03/Francis-Bacon-and-the-Loss-of-Self-by-Ernst-van-Alphen.pdf
    • http://muicuiu.dumb1.com/3a02a02a05a09a04/Fires-of-London-Francis-Bacon-1-by-Janice-Law.pdf
    • http://muicuiu.dumb1.com/5a04a01a08a03a02/Francis-Bacon-The-Logic-of-Sensation-by-Gilles-Deleuze.pdf
    • http://muicuiu.dumb1.com/1a00a05a06a00a08a09/Francis-Bacon-Full-Face-and-in-Profile-by-Michel-Leiris.pdf
    • http://muicuiu.dumb1.com/1a01a04a07a08a08a05/Francis-Bacon-Painting-in-a-Godless-World-by-Rina-Arya.pdf
    • http://muicuiu.dumb1.com/7a03a07a01a07a04/Sylva-Sylvarum-Or-a-Natural-History-in-Ten-Centuries-by-Francis-Bacon.pdf
    • http://muicuiu.dumb1.com/3a04a09a00a06a02/Winning-Lord-West-Dashing-Widows-3-by-Anna-Campbell.pdf
    • http://muicuiu.dumb1.com/2a00a04a02a06a02/Catching-Captain-Nash-Dashing-Widows-6-by-Anna-Campbell.pdf
    • http://muicuiu.dumb1.com/3a02a03a02a03a00/Blimey-from-Bohemia-to-Britpop-The-London-Artworld-from-Francis-Bacon-to-Damien-Hirst-by-Matthew-Collin.pdf
    • http://muicuiu.dumb1.com/4a08a08a09a05a00/The-Angel-of-Hever-Castle-City-of-Mystery-4-5-by-Kim-Wright.pdf
    • http://muicuiu.dumb1.com/6a02a05a02a03/Castle-Grey---A-Katt-and-Mouse-Mystery-by-L-C-Wright.pdf
    • http://muicuiu.dumb1.com/3a07a03a09a04a00/Mystery-at-Maplemead-Castle-The-Chapelwick-Mysteries-2-by-Kitty-French.pdf
    • http://muicuiu.dumb1.com/9a09a07a03a02a08/The-Murders-at-Astaire-Castle-Mac-Faraday-Mystery-5-by-Lauren-Carr.pdf
    • http://muicuiu.dumb1.com/8a07a01a01/The-Prisoner-in-the-Castle-Maggie-Hope-Mystery-8-by-Susan-Elia-MacNeal.pdf
    • http://muicuiu.dumb1.com/4a09a02a00a02a04/Keeper-of-the-Castle-A-Haunted-Home-Renovation-Mystery-by-Juliet-Blackwell.pdf
    • http://muicuiu.dumb1.com/5a04a01a08a03a02/Francis-Bacon-The-Logic-of

Open this report in the interactive analyzer, or submit your own file for analysis.