Malicious PDF — malware analysis report

Static analysis result for SHA-256 b6382594f6711917…

MALICIOUS

PDF

18.8 KB Created: 2019-04-30 02:44:34 +01:00 Authoring application: mPDF 5.7
MD5: 0693197177f16e02423428de0ece38a5 SHA-1: 139041862e9b77df73715922c7ae920dd0c88c9c SHA-256: b6382594f6711917302f33006034dc47cc479f98d02be7d864c06c5abe550829
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded external links, as indicated by the PDF_SEO_LINK_FARM heuristic. While many of these links point to benign content, the sheer volume and the ML classifier's high confidence score suggest a malicious intent, likely for SEO spam or to distribute further payloads. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/7a09a00a04a05a06/Four-Letters-of-Comforts-for-the-Deaths-of-the-Earle-of-Hadingtoun-and-of-the-Lord-Boyd-1640-by-Zacharie-Boyd.pdf
    • http://muicuiu.dumb1.com/7a09a00a04a05a03/Four-Poems-from-Zion-s-Flowers-Or-Christian-Poems-for-Spiritual-Edification-by-Zacharie-Boyd.pdf
    • http://muicuiu.dumb1.com/7a09a00a07a04a07/Four-Poems-from-Zion-s-Flowers-Or-Christian-Poems-for-Spiritual-Edification-by-Mr-Zacharie-Boyd.pdf
    • http://muicuiu.dumb1.com/4a01a07a04a00a00/Standing-In-Two-Circles-The-Collected-Works-Of-Boyd-Rice-by-Boyd-Rice.pdf
    • http://muicuiu.dumb1.com/7a09a00a04a05a04/Four-Poems-from-Zion-s-Flowers-Edification-Or-Christian-Poems-for-Spiritual-Edification-Printed-from-His-Manuscript-in-the-Library-of-the-University-of-Glasgow-with-an-Introd-Containing-Some-Notices-of-His-Life-and-Writings-by-Zacharie-Boyd.pdf
    • http://muicuiu.dumb1.com/2a05a07a00a04a03/WILL-by-Maria-Boyd.pdf
    • http://muicuiu.dumb1.com/2a02a02a08a02a09/In-the-Stars-by-Whitney-Boyd.pdf
    • http://muicuiu.dumb1.com/4a05a00a02a02a09/The-Evidence-by-Austin-Boyd.pdf
    • http://muicuiu.dumb1.com/4a05a04a05a00a03/Solo-by-William-Boyd.pdf
    • http://muicuiu.dumb1.com/6a01a07a03a01/A-Good-Man-in-Africa-by-William-Boyd.pdf
    • http://muicuiu.dumb1.com/4a05a02a04a04a06/Brazzaville-Beach-by-William-Boyd.pdf
    • http://muicuiu.dumb1.com/3a06a02a04a02a00/The-Pollinators-of-Eden-by-John-Boyd.pdf
    • http://muicuiu.dumb1.com/2a04a09a01a05a09/Grey-to-Black-by-Susan-Boyd.pdf
    • http://muicuiu.dumb1.com/3a02a01a09a02a04/Cardboard-Crown-by-Martin-Boyd.pdf
    • http://muicuiu.dumb1.com/7a04a03a02a01/Thursdays-in-the-Park-by-Hilary-Boyd.pdf
    • http://muicuiu.dumb1.com/1a00a04a06a09a02a09/The-Lavender-House-by-Hilary-Boyd.pdf
    • http://muicuiu.dumb1.com/3a04a00a02a02/Any-Human-Heart-by-William-Boyd.pdf
    • http://muicuiu.dumb1.com/8a03a08a03a07/Stars-and-Bars-by-William-Boyd.pdf
    • http://muicuiu.dumb1.com/6a04a02a06a03a09/Good-Fences-by-Boyd-Craven.pdf
    • http://muicuiu.dumb1.com/1a00a04a06a07a03a09/A-Most-Desirable-Marriage-by-Hilary-Boyd.pdf
    • http://muicuiu.dumb1.com/7a09a00a04a05a04/Four-Poems-from-Zion-s-Flowers-Edification-Or-Christian-Poems-for-Spiritual-Edification-Printed-from-His-Manuscript-in-the-Library-of-the-University-of-Glasgow-with-an-Introd-Containing-Some-Notices-of-His-Life-and-Writings-by-Zacharie-Boyd.pd

Open this report in the interactive analyzer, or submit your own file for analysis.