PDF static analysis report

Static analysis result for SHA-256 c4af3848fd376177…

CLEAN

PDF

83.8 KB Created: 2015-02-04 16:57:44 +07:00 Authoring application: Microsoft® Word 2013 First seen: 2017-03-23
MD5: 2b4f34882e113542d5d23c47096f695b SHA-1: 774722f340b4f7b42466122760c6758d16b4753e SHA-256: c4af3848fd376177e4a7490f4c36ce555ce19699243e0fc3fc17ac4274b92273
4 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains an embedded URI pointing to an external website, which is a common tactic for phishing or malware distribution. The document body is heavily obfuscated, preventing a clear understanding of its specific intent beyond the external link. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier clean score 0.0039

Heuristics 2

  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://www.equalityindonesia.com/ PDF link annotation