PDF malware analysis — malicious · c4abed3c2cb9b49a

MALICIOUS

PDF

17.4 KB Created: 2019-06-04 09:57:34 +01:00 Authoring application: mPDF 5.7 First seen: 2021-06-28

MD5: 1480146dd7764437b39af9548ec8a992 SHA-1: bbe76d852aac8c46df7d91616fa1142e48611d28 SHA-256: c4abed3c2cb9b49aa40bbd16bc1ddc1dd37f341991141949a467ffdc8b9bb932

92 Risk Score

Malware Insights

MITRE ATT&CK

T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to a single domain, identified by the PDF_SEO_LINK_FARM heuristic. While the URLs themselves are labeled as confirmed benign, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or as a distribution vector for other malware. No scripts were extracted from this sample.

Machine Learning

Nyx PDF Classifier malicious score 0.9788

Heuristics 2

Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM

Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://cefasfese.4pu.com/1731739737734738738/Ready-To-Roll-Roll-of-the-Dice-2-by-Melanie-Greene.pdf In PDF document text
- http://cefasfese.4pu.com/1731739737735738737/AC-DC-Maximum-Rock-Roll-The-Ultimate-Story-of-the-World-s-Greatest-Rock-and-Roll-Band-by-Murray-Engleheart.pdfIn PDF document text
- http://cefasfese.4pu.com/7735738732733/Rock-n-Roll-Promises-Rock-n-Roll-Paraphantasy-1-by-AmBear-Shellea.pdfIn PDF document text
- http://cefasfese.4pu.com/9738735731730735/Walter-Classen-Ein-Hamburger-Padagoge-Zwischen-Tradition-Und-Moderne-Lebenserinnerungen-Sechzehn-Jahre-Im-Arbeiterquartier-Mit-Ein-by-Walter-Classen.pdfIn PDF document text
- http://cefasfese.4pu.com/7739735734733736/Walter-Benjamin-Selected-Writings-Volume-2-Part-1-1927-1930-by-Walter-Benjamin.pdfIn PDF document text
- http://cefasfese.4pu.com/7734735735737734/The-Correspondence-of-Walter-Benjamin-and-Gershom-Scholem-1932-1940-by-Walter-Benjamin.pdfIn PDF document text
- http://cefasfese.4pu.com/1730739732737733739/Walter-Albrecht-pr-sentiert-Bilder-Buch-VW-K-fer-by-Walter-Albrecht.pdfIn PDF document text
- http://cefasfese.4pu.com/1731730731733730730/Walter-Niedermayr-amp-Hg-Merz-Station-Z-Sachsenhausen-by-Walter-Niedermayr.pdfIn PDF document text
- http://cefasfese.4pu.com/1730739732735738731/Walter-Albrecht-pr-sentiert-Klassische-Citroen-by-Walter-Albrecht.pdfIn PDF document text
- http://cefasfese.4pu.com/8732732730736739/Lady-of-the-Lake-Walter-Scott-1910-by-Walter-Scott.pdfIn PDF document text
- http://cefasfese.4pu.com/9732733732736738/Walter-Moers-sch-nste-Geschichten-On-the-Road-by-Walter-Moers.pdfIn PDF document text
- http://cefasfese.4pu.com/1735733734731733/The-Pirate-The-Works-of-Sir-Walter-Scott-by-Walter-Scott.pdfIn PDF document text
- http://cefasfese.4pu.com/1738739734730733/The-Roll-by-Joe-Hnida.pdfIn PDF document text
- http://cefasfese.4pu.com/1731739737735736732/That-s-How-I-Roll-by-Andrew-Vachss.pdfIn PDF document text
- http://cefasfese.4pu.com/4739737734737730/Rock-amp-Roll-Rip-Off-by-R-J-McDonnell.pdfIn PDF document text
- http://cefasfese.4pu.com/3737732732736730/How-We-Roll-by-Natasha-Friend.pdfIn PDF document text
- http://cefasfese.4pu.com/2734734733739/The-Roads-Must-Roll-by-Robert-A-Heinlein.pdfIn PDF document text
- http://cefasfese.4pu.com/1734739736732/Jelly-Roll-by-Kevin-Young.pdfIn PDF document text
- http://cefasfese.4pu.com/9732737739732/Samantha-on-a-Roll-by-Linda-Ashman.pdfIn PDF document text
- http://cefasfese.4pu.com/1736734735732737/Wrack-and-Roll-by-Bradley-Denton.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.