Malicious PDF — malware analysis report

Static analysis result for SHA-256 b9be39fe3b20dab9…

MALICIOUS

PDF

16.8 KB Created: 2019-04-30 04:09:53 +01:00 Authoring application: mPDF 5.7
MD5: 7c9c03973911a840f6c5161a8ba5c017 SHA-1: cc88dba0a0c68439f2b49da7550eb2fad5a63b81 SHA-256: b9be39fe3b20dab91836fbd0c05b7a8065bc692fe6e5ec2d461b3a910839ef1d
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this PDF as malicious with high confidence. While the specific URLs are marked as benign, the sheer volume and structure suggest a link farm or redirection mechanism intended to lead users to malicious content. No scripts were extracted, and the document body was unreadable.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a01a08a02a04a05a01/Index-Zu-Rainer-Maria-Rilke-Die-Aufzeichnungen-Des-Malte-Laurids-Brigge-by-Russell-E-Brown.pdf
    • http://muicuiu.dumb1.com/1a01a08a02a04a05a02/Die-Aufzeichnungen-des-The-Notebooks-of-Malte-Laurids-Brigge---Vol-2-of-2-German-English-Bilingual-Edition-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/3a04a04a02a06/The-Notebooks-of-Malte-Laurids-Brigge-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/7a05a03a03a03a06/The-Notebooks-of-Malte-Laurids-Brigge-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/1a00a04a08a09a01a00/Rilke-Kommentar-Zu-Den-Aufzeichnungen-Des-Malte-Laurids-Brigge-by-William-J-Small.pdf
    • http://muicuiu.dumb1.com/1a01a08a02a05a02a06/Le-parole-dell-angelo-Poesie-scelte-di-Rainer-Maria-Rilke-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/4a02a03a02a01a00/The-Complete-French-Poems-of-Rainer-Maria-Rilke-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/8a02a02a00a02a01/Letters-of-Rainer-Maria-Rilke-1892-1910-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/4a07a00a08a07a02/Rainer-Maria-Rilke-Gesammelte-Werke-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/9a04a03a03a02a03/Translations-from-the-Poetry-of-Rainer-Maria-Rilke-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/9a04a03a04a00a07/Wartime-Letters-of-Rainer-Maria-Rilke-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/9a04a03a04a01a00/Werke-von-Rainer-Maria-Rilke-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/1a03a02a04a00a03/A-Year-with-Rilke-Daily-Readings-from-the-Best-of-Rainer-Maria-Rilke-by-Anita-Barrows.pdf
    • http://muicuiu.dumb1.com/7a01a03a03a01/Rilke-s-Book-of-Hours-Love-Poems-to-God-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/2a06a03a09a03a02/The-Lay-of-the-Love-and-Death-of-Cornet-Christopher-Rilke-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/9a04a03a02a09a02/The-Unknown-Rilke-Selected-Poems-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/2a06a03a08a02a04/Rilke-s-Book-of-Hours-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/9a04a03a02a08a06/Rilke-in-Paris-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/4a08a02a03a01a07/Duino-Elegies-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/9a04a03a02a08a08/Letters-on-C-zanne-by-Rainer-Maria-Rilke.pdf
    • http://muicuiu.dumb1.com/4a02a03a02a01a00/The-Complete-French-Poems-

Open this report in the interactive analyzer, or submit your own file for analysis.