Malicious PDF — malware analysis report

Static analysis result for SHA-256 c4db2be3e297e3a7…

MALICIOUS

PDF

20.5 KB Created: 2019-04-30 04:14:35 +01:00 Authoring application: mPDF 5.7
MD5: c5b3c532c46c425c10bc7c0fc854bb56 SHA-1: f2a4d7a54832f6306b4618842a583d87a4e432f6 SHA-256: c4db2be3e297e3a7a916854cfecccdca660c6609cbc19ee374708b80fc76b25f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, pointing to external PDF documents. The ML classifier also flagged this PDF as malicious. The primary attack pattern appears to be a link farm designed to direct users to a large collection of potentially malicious or unwanted content, rather than delivering a direct payload.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9472

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a01a08a08a04a07a06/BARENREITER-LUBECK-VINCENT---NEW-EDITION-OF-THE-COMPLETE-ORGAN-AND-KEYBOARD-WORKS-VOL-1---ORGAN-HARPSICHORD-Classical-sheets-Organ-by-Lubeck.pdf
    • http://muicuiu.dumb1.com/1a01a08a08a05a06a00/Bildung-in-Lubeck-Universitat-Zu-Lubeck-Universitatsklinikum-Schleswig-Holstein-Katharineum-Zu-Lubeck-Stadtbibliothek-by-Quelle-Wikipedia.pdf
    • http://muicuiu.dumb1.com/1a01a08a08a06a02a02/Strasse-in-Lubeck-Ehemalige-Strasse-in-Lubeck-Strasse-in-Lubeck-Altstadt-Wakenitzufer-Holstentorplatz-Marienkirchhof-Engelsgrube-by-Quelle-Wikipedia.pdf
    • http://muicuiu.dumb1.com/1a01a08a08a06a02a04/Kultur-Lubeck-Skulpturen-Und-Objekte-in-Lubeck-Lubecker-Stadtteilkinos-Lubeckische-Kunst-Ausserhalb-Lubecks-by-Quelle-Wikipedia.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a06a02a01/The-Last-Day-by-Emily-Organ.pdf
    • http://muicuiu.dumb1.com/1a03a04a01a07a01/The-Organ-Broker-by-Stu-Strumwasser.pdf
    • http://muicuiu.dumb1.com/1a00a09a07a05a00a08/The-Outsider-by-Emily-Organ.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a08a00a09/Organ-Transplants-by-Racquel-Foran.pdf
    • http://muicuiu.dumb1.com/2a08a01a01a04a05/The-Organ-Grinders-by-Bill-Fitzhugh.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a07a01a06/First-Aid-for-the-Basic-Sciences-Organ-Systems-by-Tao-T-Le.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a06a02a08/Organ-Reapers-by-Shay-West.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a07a04a00/The-Organ-Builder-by-Robert-Cohen.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a08a01a01/Organ-Transplants-by-Robert-Finn.pdf
    • http://muicuiu.dumb1.com/6a03a03a01a01a00/Iphigenie-in-Oberelchingen-for-Trumpet-and-Organ-by-Phaedimus.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a07a09a03/Organ-Music-by-Johann-Sebastian-Bach.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a07a05a07/The-House-On-Cheyne-Walk-by-Perry-Organ.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a08a00a03/The-Art-of-Organ-Building-Vol-1-by-George-Ashdown-Audsley.pdf
    • http://muicuiu.dumb1.com/7a06a04a05a06a06/Seven-Organ-Transcriptions-by-Michel-Richard-Delalande.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a07a00a08/The-Organ-Grinder-s-Monkey-by-Robert-Rangel.pdf
    • http://muicuiu.dumb1.com/1a01a09a06a07a04a01/The-Organ-Grinder-by-Sara-Curran-Ross.pdf
    • http://muicuiu.dumb1.com/1a01a08a08a06a02a02

Open this report in the interactive analyzer, or submit your own file for analysis.