Malicious PDF — malware analysis report

Static analysis result for SHA-256 bb3a4015c4f75e01…

MALICIOUS

PDF

18.0 KB Created: 2019-04-08 16:34:12 +01:00 Authoring application: mPDF 5.7 First seen: 2021-04-10
MD5: cdce2b0db34a428465cd8091275a2511 SHA-1: c35928931af7ee4b1495b1c10bcea769a623a193 SHA-256: bb3a4015c4f75e01bc61000e975922146a0e8cdd58134eb0c6f674659c5639e5
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://iiockoidoa.linkpc.net/42e22e72e42e92e4/Bear-s-New-Friend-by-Karma-Wilson.pdf In PDF document text
    • http://iiockoidoa.linkpc.net/42e12e72e32e12e4/Big-Bear-Small-Mouse-by-Karma-Wilson.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/32e82e12e62e72e5/Bear-Feels-Scared-by-Karma-Wilson.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/62e72e52e32e42e7/Dinos-on-the-Go-by-Karma-Wilson.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/12e12e52e82e82e02e9/Uh-oh-Calico-by-Karma-Wilson.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/42e72e92e32e92e7/A-Frog-in-the-Bog-by-Karma-Wilson.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/42e82e02e12e02e8/Whopper-Cake-by-Karma-Wilson.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/72e02e72e32e52e6/Mortimer-s-First-Garden-by-Karma-Wilson.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/72e22e02e22e12e9/Little-Bear-s-and-Friend-s-Summer-Trip-by-Judith-Dompierre.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/72e22e02e22e62e5/Little-Bear-s-and-Friend-s-Summer-Trip-by-Judith-Dompierre.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/12e22e82e42e42e9/The-Fox-and-the-Bear-The-Silurian-1-by-L-A-Wilson.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/32e12e02e42e32e7/Good-Karma-Strong-Karma-Trilogy-1-by-Donya-Lynne.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/22e12e02e92e02e1/Mama-Bear-It-s-not-real-smart-to-take-Baby-Bear-and-leave-Mama-Bear-alive-to-come-after-you-by-Foy-W-Minson.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/82e72e02e52e92e4/King-s-Quest-Omnipedia---Kq3-Characters-Forbidden-Items-Places-Alexander-Baby-Bear-Bandits-Chickens-Fish-Gertrude-Graham-Gwydion-Lizard-Mama-Bear-Manannan-Medusa-Papa-Bear-Rosella-Rumplestiltskin-Squirrel-the-Oracle-Thor-by-Source-Wikia.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/12e02e72e12e02e02e7/Friend-Against-Friend-Sweet-Valley-High-69-by-Francine-Pascal.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/52e42e82e22e12e4/Bear-Witness-to-Murder-Shamelessly-Adorable-Teddy-Bear-Mystery-2-by-Meg-Macy.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/12e02e52e52e82e52e6/Bear-and-Bear-Alike-Blackwood-Brothers-3-by-Marie-Mason.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/42e52e42e12e82e8/Bad-Boy-Fire-Bear-Marked-Bear-1-by-Bella-Love-Wins.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/12e82e42e62e32e3/Bound-To-Her-Bear-Bear-Bluff-Clan-1-by-Harmony-Raines.pdfIn PDF document text
    • http://iiockoidoa.linkpc.net/92e22e22e32e82e8/The-Witness-and-the-Bear-Bear-Valley-Shifters-1-by-T-S-Joyce.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.