Malicious PDF — malware analysis report

Static analysis result for SHA-256 b8c498a8db061c8c…

MALICIOUS

PDF

18.5 KB Created: 2019-05-03 17:58:29 +01:00 Authoring application: mPDF 5.7 First seen: 2021-10-12
MD5: 0caa606310e2aa3626a28ed34f01a1a0 SHA-1: 5f11dd0697a8ff34f561af50ede617811895d9d3 SHA-256: b8c498a8db061c8c02ecdd7c90d9d429e17b3ad825e4516bc4aab2ee383d5813
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified as a link farm, which is a common tactic for SEO manipulation or distributing malicious content. While the specific URLs extracted were labeled as benign, the heuristic 'PDF_SEO_LINK_FARM' and the ML classifier strongly indicate malicious intent. The document body is heavily obfuscated, preventing a detailed analysis of its specific payload or script execution.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/4735731733735733/The-Queen-s-Vow-A-Novel-of-Isabella-of-Castile-by-C-W-Gortner.pdf In PDF document text
    • http://cefasfese.4pu.com/2732733737733736/Isabella-of-Castile-The-First-Renaissance-Queen-by-Nancy-Rubin-Stuart.pdfIn PDF document text
    • http://cefasfese.4pu.com/2734734733732733/Sister-Queens-The-Noble-Tragic-Lives-of-Katherine-of-Aragon-and-Juana-Queen-of-Castile-by-Julia-Fox.pdfIn PDF document text
    • http://cefasfese.4pu.com/2733739732731738/Queen-Isabella-Treachery-Adultery-and-Murder-in-Medieval-England-by-Alison-Weir.pdfIn PDF document text
    • http://cefasfese.4pu.com/2736732739735730/Marlene-by-C-W-Gortner.pdfIn PDF document text
    • http://cefasfese.4pu.com/8734733733/The-Romanov-Empress-by-C-W-Gortner.pdfIn PDF document text
    • http://cefasfese.4pu.com/2735732735732735/History-s-Great-Queens-by-C-W-Gortner.pdfIn PDF document text
    • http://cefasfese.4pu.com/2739736732730733/The-Confessions-of-Catherine-De-Medici-by-C-W-Gortner.pdfIn PDF document text
    • http://cefasfese.4pu.com/1734739734739739/The-Tudor-Secret-The-Spymaster-Chronicles-1-by-C-W-Gortner.pdfIn PDF document text
    • http://cefasfese.4pu.com/4732737731732732/The-Tudor-Vendetta-The-Spymaster-Chronicles-3-by-C-W-Gortner.pdfIn PDF document text
    • http://cefasfese.4pu.com/3731737732737737/The-Tudor-Conspiracy-The-Spymaster-Chronicles-2-by-C-W-Gortner.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731730732736732/Book-of-Enlightenment-Generations-Saga-1-by-Mia-Castile.pdfIn PDF document text
    • http://cefasfese.4pu.com/2736738737739737/Chasing-Butterflies-The-Butterfly-Chronicles-4-by-Mia-Castile.pdfIn PDF document text
    • http://cefasfese.4pu.com/2735731737734732/Queen-Takes-Queen-Their-Vampire-Queen-3-by-Joely-Sue-Burkhart.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731737735737731/1492-The-Life-and-Times-of-Juan-Cabezon-of-Castile-by-Homero-Aridjis.pdfIn PDF document text
    • http://cefasfese.4pu.com/5731733733735735/The-Limits-of-Royal-Authority-Resistance-and-Obedience-in-Seventeenth-Century-Castile-by-Ruth-MacKay.pdfIn PDF document text
    • http://cefasfese.4pu.com/5730731735732732/The-Queen-Mother-The-Untold-Story-of-Elizabeth-Bowes-Lyon-Who-Became-Queen-Elizabeth-The-Queen-Mother-by-Lady-Colin-Campbell.pdfIn PDF document text
    • http://cefasfese.4pu.com/4737736738735735/The-Lady-Queen-The-Notorious-Reign-of-Joanna-I-Queen-of-Naples-Jerusalem-and-Sicily-by-Nancy-Goldstone.pdfIn PDF document text
    • http://cefasfese.4pu.com/3734731736736/The-Queen-of-Attolia-The-Queen-s-Thief-2-by-Megan-Whalen-Turner.pdfIn PDF document text
    • http://cefasfese.4pu.com/2734739733730/The-Summer-Queen-The-Snow-Queen-Cycle-3-by-Joan-D-Vinge.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.