Malicious PDF — malware analysis report

Static analysis result for SHA-256 b90d326e1c6d7554…

MALICIOUS

PDF

19.8 KB Created: 2019-06-04 09:46:58 +01:00 Authoring application: mPDF 5.7 First seen: 2020-12-28
MD5: ad545fc6d060e540e7fd7876d4848b1a SHA-1: 01bb2e1bf1ad48d0d9ab06741903b088c5aeb7c3 SHA-256: b90d326e1c6d7554a7600a9aef234876a1d6e3dedc384db31e3f8d98c23f1eb0
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, identified by the PDF_SEO_LINK_FARM heuristic. While the ML_NYX_PDF_MALICIOUS classifier strongly indicates maliciousness, the specific intent appears to be SEO manipulation or hosting a large number of potentially malicious documents rather than direct execution of a payload from this file. The embedded URLs themselves are not directly malicious but contribute to the overall suspicious nature.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/8733738733733/Echo-Park-Harry-Bosch-12-by-Michael-Connelly.pdf In PDF document text
    • http://cefasfese.4pu.com/3738735739739739/The-Harry-Bosch-Mysteries-Volume-2-The-Last-Coyote-Trunk-Music-Angels-Flight-Harry-Bosch-4-6-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/4738734735739736/The-Harry-Bosch-Novels-Volume-3-A-Darkness-More-Than-Night-City-of-Bones-Lost-Light-Harry-Bosch-7-9-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/1735733737731734/Dark-Sacred-Night-Ren-e-Ballard-2-Harry-Bosch-21-Harry-Bosch-Universe-31-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/4738737736734735/A-Darkness-More-Than-Night-Harry-Bosch-7-Terry-McCaleb-2-Harry-Bosch-Universe-9-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/2730730737/The-Crossing-Harry-Bosch-18-Mickey-Haller-6-Harry-Bosch-Universe-27-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/6735738734/Two-Kinds-of-Truth-Harry-Bosch-20-Harry-Bosch-Universe-30-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/1735737738737730/The-Burning-Room-Harry-Bosch-17-Harry-Bosch-Universe-26-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/4739732739730734/Angle-of-Investigation-Harry-Bosch-14-7-Harry-Bosch-Universe-22-2-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/1739731733739739/Nine-Dragons-Harry-Bosch-15-Harry-Bosch-Universe-20-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/8730736734738/The-Narrows-Harry-Bosch-10-Harry-Bosch-Universe-13-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/3738735733737739/The-Black-Box-Harry-Bosch-16-Harry-Bosch-Universe-24-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/3735738734732732/Switchblade-Harry-Bosch-16-5-Harry-Bosch-Universe-25-5-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/1734730736735738/The-Closers-Harry-Bosch-11-Harry-Bosch-Universe-14-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/4739730732731737/A-Darkness-More-Than-Night-Harry-Bosch-7-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/4739730735732738/The-Concrete-Blonde-Harry-Bosch-3-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/2738735731734733/City-Of-Bones-Harry-Bosch-8-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/3734739735735/The-Lincoln-Lawyer-Mickey-Haller-1-Harry-Bosch-Universe-15-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/1737730737732/Blood-Work-Terry-McCaleb-1-Harry-Bosch-Universe-8-by-Michael-Connelly.pdfIn PDF document text
    • http://cefasfese.4pu.com/3732737739738734/The-Gods-of-Guilt-Mickey-Haller-5-Harry-Bosch-Universe-25-by-Michael-Connelly.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.