Malicious PDF — malware analysis report

Static analysis result for SHA-256 c0b9c8ae96912253…

MALICIOUS

PDF

20.3 KB Created: 2019-05-01 17:24:44 +01:00 Authoring application: mPDF 5.7 First seen: 2020-12-28
MD5: def873b9f3fc696dc735e8c20f9acd73 SHA-1: 20e216cd406f621f587e375d37809adbfa36831f SHA-256: c0b9c8ae969122537a406316d2e85b5513053bff271827bfca0373eb2d66c4fc
94 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

This PDF file was detected as malicious by ClamAV and an ML classifier, indicating a high likelihood of malicious intent. The document body contains numerous embedded URLs that masquerade as book titles, likely serving as a lure to download further malicious content. The presence of these external links suggests the document acts as a dropper, aiming to redirect users to malicious sites.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9904

Heuristics 3

  • ClamAV: Pdf.Dropper.Agent-9742522-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Dropper.Agent-9742522-0
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://kiteeearpdf.myhome.cx/6f212f215f218f219f217/Gargantua-and-Pantagruel-Illustrated-Book-4-by-Fran-ois-Rabelais.pdf PDF link annotation
    • http://kiteeearpdf.myhome.cx/6f212f215f218f219f216/Gargantua-and-Pantagruel-Illustrated-Book-3-by-Fran-ois-Rabelais.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/6f212f215f217f218f212/Gargantua-and-Pantagruel-Illustrated-Book-5-by-Motteux-Peter-Anthony.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/6f212f215f217f218f213/Gargantua-and-Pantagruel-Illustrated-Book-3-by-Motteux-Peter-Anthony.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/6f212f215f217f217f218/Gargantua-And-Pantagruel-by-Fran-ois-Rabelais.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/6f210f215f211f217f216/Rabelais-Gargantua-Pantagruel-by-Screech.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/5f213f219f218f211f217/Gargantua-and-Pantagruel-by-Fran-ois-Rabelais.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/6f212f215f217f219f218/Gargantua-and-Pantagruel-Volume-2-by-Fran-ois-Rabelais.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/6f210f215f211f212f215/Gargantua-and-Pantagruel-Selections-by-Fran-ois-Rabelais.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/5f218f215f214f214f214/Gargantua-und-Pantagruel-Vollst-ndige-Ausgabe-by-Fran-ois-Rabelais.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/6f212f215f219f210f214/The-Inestimable-Life-of-the-Great-Gargantua-Father-of-Pantagruel-by-Fran-ois-Rabelais.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/1f219f211f216f210f212/Pantagruel-by-Fran-ois-Rabelais.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/7f212f219f215f210f217/Gargantua-by-Fran-ois-Rabelais.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/4f214f218f210f216/Gargantua-by-Fran-ois-Rabelais.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/6f212f215f218f210f217/Gargantua-Fran-ois-Rabelais-by-Paule-Andrau.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/5f218f212f213f216f218/Dictionnaire-Royal-Fran-ois-Et-Anglois-Le-Fran-ois-Tir-Des-Dictupdnaires-de-Richelet-Furetiere-Tachard-de-l-Academie-Fran-oise-amp-Des-Remarques-de-Vaugelas-Menage-amp-Bouhours-Divis-En-Deux-Parties-Par-Monsieur-Boyer-of-2-Volume-2-by-Abel-Boyer.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/5f218f212f213f216f217/Dictionnaire-Royal-Fran-ois-Et-Anglois-Le-Fran-ois-Tir-Des-Dictupdnaires-de-Richelet-Furetiere-Tachard-de-l-Academie-Fran-oise-amp-Des-Remarques-de-Vaugelas-Menage-amp-Bouhours-Divis-En-Deux-Parties-Par-Monsieur-Boyer-of-2-Volume-2-by-Abel-Boyer.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/6f210f215f211f218f210/The-Essential-Rabelais-by-Fran-ois-Rabelais.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/6f210f215f210f219f217/Rabelais-by-Fran-ois-Rabelais.pdfIn PDF document text
    • http://kiteeearpdf.myhome.cx/5f212f218f210f215f213/The-Complete-Works-of-Fran-ois-Rabelais-by-Fran-ois-Rabelais.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.