Malicious PDF — malware analysis report

Static analysis result for SHA-256 c208650a37774d2e…

MALICIOUS

PDF

23.8 KB Created: 2019-11-07 14:53:26 +00:00 Authoring application: mPDF 5.7
MD5: 1975db02586ea7ad58e8ed3aab5ff1b7 SHA-1: d31d3a56e8f184560eba711f751bd5cc5030b09c SHA-256: c208650a37774d2e09fddc0eabcc1685454921e4185b87b58daf62a0bb3a2dcb
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a link farm with 28 external links, many of which are to PDFs. The ML classifier also flagged this document as malicious. The primary attack pattern involves luring users to a large number of external resources. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9711

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/7735739736732732/La-Cuisine-Avec-Asterix-Pour-Petits-Gaulois-Debrouillards-et-Gourmands-Cooking-with-Asterix-by-Albert-Uderzo.pdf
    • http://cefasfese.4pu.com/6739739739733734/Fiction-Set-in-Roman-Gaul-Asterix-Novels-Set-in-Roman-Gaul-Rene-Goscinny-Albert-Uderzo-Obelix-List-of-Asterix-Characters-Humour-in-Asterix-by-Source-Wikipedia.pdf
    • http://cefasfese.4pu.com/5734732732739734/Asterix-amp-Obelix-s-Birthday-The-Golden-Book-Ast-rix-34-by-Albert-Uderzo.pdf
    • http://cefasfese.4pu.com/5734732733739732/Asterix-On-Top-Asterix-The-Gaul-Asterix-And-The-Golden-Sickle-Asterix-And-The-Banquet-Asterix-And-The-Normans-Asterix-And-The-Roman-Agent-Asterix-And-Caesar-s-Gift-by-Ren-Goscinny.pdf
    • http://cefasfese.4pu.com/3737734733739733/Asterix-and-the-Black-Gold-Asterix-26-by-Albert-Uderzo.pdf
    • http://cefasfese.4pu.com/7730730731732731/Asterix-the-Gaul-Series-6-Collection-5-Books-Set-26-30-Asterix-and-the-Black-Gold-Asterix-and-Son-Asterix-and-the-Magic-Carpet-Asterix-and-the-Secret-Weapon-Asterix-and-Obelix-All-at-Sea-by-Ren-Goscinny.pdf
    • http://cefasfese.4pu.com/7731733737733733/Ast-rix---Ast-rix-le-Gaulois---n-1-by-Ren-Goscinny.pdf
    • http://cefasfese.4pu.com/6739739739732732/Asterix-Wie-Obelix-als-Kind-in-den-Zaubertrank-geplumpst-ist-by-Albert-Uderzo-Rene-Goscinny.pdf
    • http://cefasfese.4pu.com/5734732734738739/Asterix-the-Champion-quot-Asterix-the-Gaul-quot-quot-Asterix-in-Spain-quot-quot-Asterix-in-Britain-quot-by-Ren-Goscinny.pdf
    • http://cefasfese.4pu.com/2736731734734730/Asterix-and-the-Chariot-Race-Asterix-37-by-Jean-Yves-Ferri.pdf
    • http://cefasfese.4pu.com/3733736733738738/Asterix-and-the-Roman-Agent-Ast-rix-15-by-Ren-Goscinny.pdf
    • http://cefasfese.4pu.com/2734739733739732/Asterix-and-the-Picts-Asterix-35-by-Jean-Yves-Ferri.pdf
    • http://cefasfese.4pu.com/3738732735734731/Asterix-and-the-Great-Crossing-Asterix-22-by-Ren-Goscinny.pdf
    • http://cefasfese.4pu.com/4738731733737/Asterix-the-Gaul-Asterix-1-by-Ren-Goscinny.pdf
    • http://cefasfese.4pu.com/9731734737733734/Asterix-02-Asterix-und-Kleopatra-by-Ren-Goscinny.pdf
    • http://cefasfese.4pu.com/2733735738738735/Asterix-the-Gladiator-Asterix-4-by-Ren-Goscinny.pdf
    • http://cefasfese.4pu.com/4739736734730734/Asterix-in-Spain-Asterix-14-by-Ren-Goscinny.pdf
    • http://cefasfese.4pu.com/9731734735734731/Asterix-01-Asterix-der-Gallier-by-Ren-Goscinny.pdf
    • http://cefasfese.4pu.com/2733737733732734/Asterix-and-the-Cauldron-Asterix-13-by-Ren-Goscinny.pdf
    • http://cefasfese.4pu.com/3738732735733736/Asterix-and-the-Soothsayer-Asterix-19-by-Ren-Goscinny.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.