Malicious PDF — malware analysis report

Static analysis result for SHA-256 bce76a04a1c2b47f…

MALICIOUS

PDF

17.1 KB Created: 2019-08-02 07:37:09 +01:00 Authoring application: mPDF 5.7
MD5: dac315939e28c787960156b386d6e688 SHA-1: 95e26e8568bed9bd391bb376609ead0a409416d9 SHA-256: bce76a04a1c2b47f4766cba3c801288eb5a4f1979af96280600e5a970807337b
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this PDF as malicious with high confidence. The document body consists primarily of these links, suggesting a lure to a link farm for SEO manipulation or to distribute further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9787

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/3736734731739730/Summer-s-Journey-Volume-One---Losing-Control-Summer-s-Journey-1-by-Summer-Daniels.pdf
    • http://cefasfese.4pu.com/3735735733736/The-Summer-I-Turned-Pretty-Trilogy-The-Summer-I-Turned-Pretty-It-s-Not-Summer-Without-You-We-ll-Always-Have-Summer-by-Jenny-Han.pdf
    • http://cefasfese.4pu.com/1731731738731733732/Summer-Days-and-Summer-Nights-Twelve-Love-Stories-by-Stephanie-Perkins.pdf
    • http://cefasfese.4pu.com/3733735732733735/Red-Summer-The-Summer-of-1919-and-the-Awakening-of-Black-America-by-Cameron-McWhirter.pdf
    • http://cefasfese.4pu.com/4732731733734730/The-Summer-Wind-Lowcountry-Summer-2-by-Mary-Alice-Monroe.pdf
    • http://cefasfese.4pu.com/4730734735735738/Summer-Angel-Summer-Spirit-Novellas-1-by-Samantha-Jacobey.pdf
    • http://cefasfese.4pu.com/4733731738738731/The-End-of-Summer-Part-One-The-End-of-Summer-Series-by-Alex-M-Smith.pdf
    • http://cefasfese.4pu.com/4731736731735735/That-Summer-Part-Two-That-Summer-2-by-Lauren-Crossley.pdf
    • http://cefasfese.4pu.com/2737732732731732/The-Summer-I-Turned-Pretty-Summer-1-by-Jenny-Han.pdf
    • http://cefasfese.4pu.com/1738730734738735/Since-Last-Summer-Rules-of-Summer-2-by-Joanna-Philbin.pdf
    • http://cefasfese.4pu.com/3735738739735737/Summer-Series-Boxed-Set-Summer-1-2-3-by-C-J-Duggan.pdf
    • http://cefasfese.4pu.com/1732737738739734/The-Last-Summer-Last-Summer-Series-1-by-Jacquelyn-Eubanks.pdf
    • http://cefasfese.4pu.com/1731736734730730/Last-Summer-Summer-Boys-4-by-Hailey-Abbott.pdf
    • http://cefasfese.4pu.com/4731736731735733/That-Summer-Part-One-That-Summer-1-by-Lauren-Crossley.pdf
    • http://cefasfese.4pu.com/1734737736732737/All-I-Want-Alabama-Summer-2-by-J-Daniels.pdf
    • http://cefasfese.4pu.com/2736737733739731/All-I-Want-Alabama-Summer-2-by-J-Daniels.pdf
    • http://cefasfese.4pu.com/4730733737732737/Losing-It-Summer-Lovin-2-by-Audra-North.pdf
    • http://cefasfese.4pu.com/7731739732737736/Where-We-Belong-Alabama-Summer-4-by-J-Daniels.pdf
    • http://cefasfese.4pu.com/1732739734731739/When-I-Fall-Alabama-Summer-3-by-J-Daniels.pdf
    • http://cefasfese.4pu.com/8732731730735/Where-We-Belong-Alabama-Summer-3-5-by-J-Daniels.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.