Malicious PDF — malware analysis report

Static analysis result for SHA-256 c1683694d3dcaae3…

MALICIOUS

PDF

22.9 KB Created: 2019-05-01 19:02:14 +01:00 Authoring application: mPDF 5.7
MD5: bbb6d33e668d88ee850e5e9387aad685 SHA-1: 0bf5934bf744876b91a02af87a91b3b6d7358366 SHA-256: c1683694d3dcaae3fc40bc77da32337b79f2ec9a4ca01eba87783bae2d5defd1
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF document contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. While the specific URLs extracted were classified as benign, the sheer volume and structure suggest a malicious intent, possibly for SEO manipulation or to redirect users to malicious content. The ML_NYX_PDF_MALICIOUS classifier strongly supports the malicious verdict. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9903

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/4206209201205202/The-Trouser-Press-Record-Guide-The-Ultimate-Guide-to-Alternative-Music-by-Ira-A-Robbins.pdf
    • http://xiixmcuin.linkpc.net/3204203209208208/The-Rough-Guide-To-Classical-Music-Rough-Guide-Music-Reference---4th-edition-by-Duncan-Clark.pdf
    • http://xiixmcuin.linkpc.net/1201202206206209200/Ultimate-Handbook-Guide-to-Guilin-China-Travel-Guide-by-Felicia-Harrington.pdf
    • http://xiixmcuin.linkpc.net/8205206209209209/Male-Multiple-Orgasm-The-Ultimate-Guide-on-Becoming-a-Multi-Orgasmic-Man-Gain-Ultimate-Control---Get-More-Pleasure---Give-More-Pleasure-by-B-Foyer.pdf
    • http://xiixmcuin.linkpc.net/9205203206200/Allergy-Guide-Alternative-amp-Conventional-Solutions-by-Elizabeth-Smoots.pdf
    • http://xiixmcuin.linkpc.net/4203202205209202/The-Modern-Caveman-s-Alternative-Guide-To-Pregnancy-by-Paul-Palmer.pdf
    • http://xiixmcuin.linkpc.net/1209205208203201/The-Ultimate-Book-Guide-Over-600-Great-Books-For-8-12s-Ultimate-Book-Guides-by-Leonie-Flynn.pdf
    • http://xiixmcuin.linkpc.net/3201200202200208/Crock-Pot-Recipes-The-Ultimate-Guide-to-Only-the-Best-Crock-Pot-Recipes-from-Vegetarian-Corn-Chowder-to-Vegetarian-Chili-with-Sweep-Potatoes-This-Guide-Will-Keep-You-Coming-Back-for-More-by-Sarah-Sophia.pdf
    • http://xiixmcuin.linkpc.net/1209205208203202/Ultimate-Teen-Book-Guide-Ultimate-Book-Guides-by-Leonie-Flynn.pdf
    • http://xiixmcuin.linkpc.net/9204204200203209/Goldmine-s-Price-Guide-to-Collectible-Record-Albums-by-Neal-Umphred.pdf
    • http://xiixmcuin.linkpc.net/2203207208208203/Finding-the-Right-Treatment-Modern-and-Alternative-Medicine-A-Comprehensive-Guide-to-Getting-the-Best-of-Both-Worlds-by-Jacqueline-Krohn.pdf
    • http://xiixmcuin.linkpc.net/4209201207203/The-Ultimate-Guide-to-U-S-Army-Survival-Skills-Tactics-and-Techniques-Ultimate-Guide-to-U-S-Army-Survival-Skills-Tactics-and-Techniques-by-Jay-Mccullough.pdf
    • http://xiixmcuin.linkpc.net/5200202203203/The-Ultimate-Ps3-tm-Repair-Guide-by-Andrew-Wright.pdf
    • http://xiixmcuin.linkpc.net/8206204202208/Warriors-The-Ultimate-Guide-by-Erin-Hunter.pdf
    • http://xiixmcuin.linkpc.net/8200204200200207/Marathon-The-Ultimate-Training-Guide-by-Hal-Higdon.pdf
    • http://xiixmcuin.linkpc.net/4200205208205200/Zombie-Movies-The-Ultimate-Guide-by-Glenn-Kay.pdf
    • http://xiixmcuin.linkpc.net/7201209208207201/Millet-Recipes-The-Ultimate-Guide-by-Bridgette-Conners.pdf
    • http://xiixmcuin.linkpc.net/5204209209209200/The-Art-of-War-The-Ultimate-Guide-to-Victory-in-Battle-Business-and-Life-by-Sun-Tzu.pdf
    • http://xiixmcuin.linkpc.net/5206202204202205/THE-ULTIMATE-GUIDE-FOR-ELEVATION-TO-THE-NEXLEVEL-by-Ramone-Preston.pdf
    • http://xiixmcuin.linkpc.net/4205206201202209/Russel-Brand-Ultimate-Fan-Guide-by-Steve-Rutherford.pdf
    • http://xiixmcuin.linkpc.net/1209205208203201/The-Ultimate-Book-Guide-Over-600-Great-Books-For-8-12s-Ultimate-Book-Guides-by-Leo

Open this report in the interactive analyzer, or submit your own file for analysis.