PDF malware analysis — malicious · c51ad51a1d1e1974

MALICIOUS

PDF

22.4 KB Created: 2020-03-18 22:35:53 +00:00 Authoring application: mPDF 5.7

MD5: 98d3ded4eb78d562e089aeae6c0bfa2b SHA-1: ee5c199dd7f850e08889a7c1b14a817014ea2291 SHA-256: c51ad51a1d1e1974e3176febcab4503c8806a86260dfab8b98365494793da702

90 Risk Score

Malware Insights

MITRE ATT&CK

T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, many of which appear to be SEO-optimized book titles. The ML classifier flagged this PDF as malicious with high confidence. The primary attack pattern involves directing users to a domain hosting a link farm of potentially malicious or misleading content.

Machine Learning

Nyx PDF Classifier malicious score 0.9796

Heuristics 2

Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM

Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://lwoscmobook.myhome.cx/852415247524152435242/The-Time-Machine-The-Original-Time-Travel-Story-A-Short-Science-Fiction-Novel-about-Time-Travel-by-H-G-Wells.pdf
- http://lwoscmobook.myhome.cx/452445247524852425240/How-to-Build-a-Time-Machine-The-Real-Science-of-Time-Travel-by-Brian-Clegg.pdf
- http://lwoscmobook.myhome.cx/152425245524452455244/Masters-of-Time-A-Science-Fiction-and-Fantasy-Time-Travel-Anthology-by-Charmaine-M-Young.pdf
- http://lwoscmobook.myhome.cx/1524052455246524752435241/The-Time-Machine-the-Original-Novel-Annotated-Masterpiece-Collection-The-Time-Machine-H-G-Wells-Famous-Quotes-Book-List-and-Biography-by-H-G-Wells.pdf
- http://lwoscmobook.myhome.cx/352485243524152445241/Time-Travel-in-Einstein-s-Universe-The-Physical-Possibilities-of-Travel-Through-Time-by-J-Richard-Gott-III.pdf
- http://lwoscmobook.myhome.cx/952455248524852415247/The-Time-Traveller-s-Almanac-Part-IV---Communiqu-s-A-Treasury-of-Time-Travel-Fiction-Brought-to-You-from-the-Future-Time-Traveller-s-Almanac-Book-4-by-Ann-VanderMeer.pdf
- http://lwoscmobook.myhome.cx/452435249524352425240/Time-Anomaly-A-Time-Travel-Romance-Echo-Trilogy-2-by-Lindsey-Fairleigh.pdf
- http://lwoscmobook.myhome.cx/252425240524252495247/Time-Enough-for-Love-Italian-Time-Travel-2-by-Morgan-O-39-Neill.pdf
- http://lwoscmobook.myhome.cx/152435243524752435246/The-Mists-of-Time-Da-Vinci-Time-Travel-4-by-Susan-Squires.pdf
- http://lwoscmobook.myhome.cx/352425241524752435247/The-Best-Time-Travel-Stories-of-All-Time-by-Barry-N-Malzberg.pdf
- http://lwoscmobook.myhome.cx/152435245524452435246/Time-Travel-Adventures-Of-The-1800-Club-Time-Travel-Adventures-of-the-1800-Club-1-by-Robert-McAuley.pdf
- http://lwoscmobook.myhome.cx/152405242524252475249/The-Time-Machine-The-Wonderful-Visit-and-Other-Stories-The-Works-of-H-G-Wells-Vol-1-by-H-G-Wells.pdf
- http://lwoscmobook.myhome.cx/652495249524052425247/The-Time-Machine-by-H-G-Wells.pdf
- http://lwoscmobook.myhome.cx/752425245524452425242/The-Time-Machine-by-H-G-Wells.pdf
- http://lwoscmobook.myhome.cx/552455244524452405248/The-Time-Machine-by-H-G-Wells.pdf
- http://lwoscmobook.myhome.cx/852425248524652435244/The-Time-Machine-by-H-G-Wells.pdf
- http://lwoscmobook.myhome.cx/952495248524152425242/The-Time-Machine-by-H-G-Wells.pdf
- http://lwoscmobook.myhome.cx/1524152405245524952445249/The-Time-Machine-by-H-G-Wells.pdf
- http://lwoscmobook.myhome.cx/852495244524952415246/The-Time-Machine-by-H-G-Wells.pdf
- http://lwoscmobook.myhome.cx/752415246524752485243/The-Time-Machine-by-H-G-Wells.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.