Malicious PDF — malware analysis report

Static analysis result for SHA-256 b76ff48a09add6bc…

MALICIOUS

PDF

12.7 KB Created: 2019-05-03 05:38:40 +01:00 Authoring application: mPDF 5.7
MD5: 101af155fea2b55bb5fb34faa27164f7 SHA-1: fc582d792ffca2c65ecd92b0e01b3b455f334404 SHA-256: b76ff48a09add6bc0f2d02e56b7e7e7e733c5cdaecf30f0e68807884517a4d7f
92 Risk Score

Malware Insights

MITRE ATT&CK
T1204.002 Malicious Link T1566.002 Spearphishing Attachment

This PDF file was detected as malicious by ClamAV and an ML classifier. It contains numerous embedded URLs pointing to external content, suggesting it acts as a dropper or downloader. The document body confirms the presence of these URLs, which are likely used to deliver a secondary payload. The primary attack pattern involves luring the user to click on these links to initiate a download.

Machine Learning

  • Nyx PDF Classifier malicious score 0.8780

Heuristics 3

  • ClamAV: Pdf.Dropper.Agent-7789348-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Dropper.Agent-7789348-0
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://kiteeearpdf.myhome.cx/7f215f212f212f213f210/The-Shawl-by-David-Mamet-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f212f212f210/David-Mamet-s-Oleanna-by-David-Sauer.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f212f213f211/The-Woods-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f211f210f219/Romance-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f212f212f214/Plays-1-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f212f211f219/The-Old-Neighborhood-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f211f211f212/Faustus-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/6f218f215f218f212/Oleanna-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f213f214f218/The-Penitent-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f213f214f214/The-Chinaman-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/1f210f215f216f210f214/On-Directing-Film-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f210f212f214/A-Life-in-the-Theatre-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f213f214f215/David-Mamet-by-Harold-Bloom.pdf
    • http://kiteeearpdf.myhome.cx/3f215f212f210f213f218/Chicago-A-Novel-of-Prohibition-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f213f215f213/Tested-on-Orphans-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f212f213f213/The-Voysey-Inheritance-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f211f211f218/Wilson-A-Consideration-of-the-Sources-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f210f212f213/David-Mamet-in-Conversation-by-Leslie-Kane.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f212f212f219/Understanding-David-Mamet-by-Brenda-Murphy.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f211f211f216/Make-Believe-Town-Essays-and-Remembrances-by-David-Mamet.pdf
    • http://kiteeearpdf.myhome.cx/7f215f212f213f215f213/Tested-on-Orphans-by-David-Mamet.p

Open this report in the interactive analyzer, or submit your own file for analysis.