Malicious PDF — malware analysis report

Static analysis result for SHA-256 c06b30000622a4cf…

MALICIOUS

PDF

16.3 KB Created: 2019-05-07 03:19:31 +01:00 Authoring application: mPDF 5.7
MD5: 6026026c0f423cf093a0dfcda26dc0a5 SHA-1: 1c48172d14aef6f42e7da3b42da9429b9291f94e SHA-256: c06b30000622a4cfe87d8560655592c24295409979fe356d370e4c52b75b7c3e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic, which suggests a link farm or redirection to malicious content. The ML classifier also flagged this PDF as malicious with high confidence. While no scripts were extracted, the sheer volume of links and the ML classification indicate a malicious intent, likely to direct users to harmful websites.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9811

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/4a00a03a05a08a04/The-Girl-With-All-the-Gifts-by-M-R-Carey.pdf
    • http://muicuiu.dumb1.com/4a05a04a02a08a00/The-Girl-With-All-the-Gifts-by-M-R-Carey.pdf
    • http://muicuiu.dumb1.com/8a06a09a09a05/The-Girl-with-All-the-Gifts-by-M-R-Carey.pdf
    • http://muicuiu.dumb1.com/7a03a06a06a07a05/Morgan-Carey-and-The-Mystery-of-the-Christmas-Fairies-Morgan-Carey-2-by-Susan-Colleen-Browne.pdf
    • http://muicuiu.dumb1.com/3a06a09a00a05a05/Girl-with-the-Dragon-Tattoo-Trilogy-Bundle-The-Girl-with-the-Dragon-Tattoo-The-Girl-Who-Played-with-Fire-The-Girl-Who-Kicked-the-Hornet-s-Nest-by-Stieg-Larsson.pdf
    • http://muicuiu.dumb1.com/5a00a03a01a02a07/The-Gifts-by-Regina-Fackelmayer.pdf
    • http://muicuiu.dumb1.com/5a00a02a05a09a03/The-Gifts-of-Christmas-by-Don-Daily.pdf
    • http://muicuiu.dumb1.com/8a06a06a08a01a06/Gifts-From-Hildegard-by-Wanda-Nash.pdf
    • http://muicuiu.dumb1.com/9a09a04a08a02a03/Five-Gifts-for-the-Mind-by-Eran-Katz.pdf
    • http://muicuiu.dumb1.com/4a08a09a05a02a01/An-Exchange-of-Gifts-by-Anne-McCaffrey.pdf
    • http://muicuiu.dumb1.com/3a04a04a04a06a01/Gifts-of-an-Eagle-by-Kent-Durden.pdf
    • http://muicuiu.dumb1.com/1a03a00a01a07/Special-Gifts-by-Anne-Stuart.pdf
    • http://muicuiu.dumb1.com/1a01a02a07a09a06a02/Gifts-by-Phyllis-Limbacher-Tildes.pdf
    • http://muicuiu.dumb1.com/2a08a07a03a09a03/Simple-Gifts-Farm-1-5-by-Andrew-Grey.pdf
    • http://muicuiu.dumb1.com/3a06a00a05a06/13-Gifts-Willow-Falls-3-by-Wendy-Mass.pdf
    • http://muicuiu.dumb1.com/2a06a04a06a09a07/Winterfair-Gifts-by-Lois-McMaster-Bujold.pdf
    • http://muicuiu.dumb1.com/9a09a01a08a03/11-Birthdays-Finally-and-13-Gifts-by-Wendy-Mass.pdf
    • http://muicuiu.dumb1.com/2a02a01a06a07a03/Families-and-Other-Nonreturnable-Gifts-by-Claire-LaZebnik.pdf
    • http://muicuiu.dumb1.com/1a08a05a01a02a04/Why-We-Give-Gifts-at-Christmas-Time-by-Corine-Hyman.pdf
    • http://muicuiu.dumb1.com/4a01a04a06a05a08/Gifts-of-Fate-Kindred-of-Arkadia-7-by-Alanea-Alder.pdf
    • http://muicuiu.dumb1.com/5a00a03a

Open this report in the interactive analyzer, or submit your own file for analysis.