Malicious PDF — malware analysis report

Static analysis result for SHA-256 c5e297e809bed53e…

MALICIOUS

PDF

19.0 KB Created: 2019-04-29 23:00:34 +01:00 Authoring application: mPDF 5.7
MD5: 271edb0155fe60c926917ae8e4963a86 SHA-1: db20248a575729e917609171c3fa5dad1f10a879 SHA-256: c5e297e809bed53e2dbf3a7c61a72784ca455d31ce844758bd0d0b1ced209431
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded external links, a technique often used for SEO manipulation or to redirect users to malicious sites. While the document body is heavily obfuscated and unreadable, the PDF_SEO_LINK_FARM heuristic strongly indicates a malicious intent to distribute links. The ML classifier also flagged this PDF with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/2a01a08a06a08a08/Late-Night-Boyfriends-Tales-of-the-gay-vampire-by-Ethan-Kilburn.pdf
    • http://muicuiu.dumb1.com/2a06a00a06a08a00/My-Boyfriend-Wrote-a-Book-About-Me-And-Other-Stories-I-Shouldn-t-Share-with-Acquaintances-Coworkers-Taxi-drivers-Assistants-Job-Interviewers-Bikini-Waxers-and-Ex-Current-Future-Boyfriends-but-Have-by-Hilary-Winston.pdf
    • http://muicuiu.dumb1.com/3a04a02a01a03a05/Bonnie-Eve-Duncan-14-Eve-Quinn-and-Bonnie-3-by-Iris-Johansen.pdf
    • http://muicuiu.dumb1.com/7a06a00a02a07a02/Cuddle-Up-Tight-A-Night-Night-Book-by-John-Prater.pdf
    • http://muicuiu.dumb1.com/4a07a09a02a02a03/Ocean-Night-Hunt-Animals-at-Night-Book-2-by-N-V-Smith.pdf
    • http://muicuiu.dumb1.com/4a07a09a03a08a07/The-Night-Hunters-Animals-at-Night-Book-1-by-N-V-Smith.pdf
    • http://muicuiu.dumb1.com/4a06a05a06a07a09/The-Betrayal-of-Bonnie-Bonnie-5-by-Barbara-Van-Tuyl.pdf
    • http://muicuiu.dumb1.com/2a06a00a06a05a06/Kinski-by-Gabriel-Hardman.pdf
    • http://muicuiu.dumb1.com/1a01a01a03a09a09a05/Kinski-1-by-Gabriel-Hardman.pdf
    • http://muicuiu.dumb1.com/1a01a02a02a07a09a08/Extraction-Kid-Sensation-2-5-by-Kevin-Hardman.pdf
    • http://muicuiu.dumb1.com/5a05a04a08a00a02/Amped-A-Kid-Sensation-Companion-Novel-by-Kevin-Hardman.pdf
    • http://muicuiu.dumb1.com/6a06a05a08a00a04/Terminus-Fringe-Worlds-1-by-Kevin-Hardman.pdf
    • http://muicuiu.dumb1.com/9a04a06a00a09/No-Lullaby-for-Tommy-by-Charles-Keith-Hardman.pdf
    • http://muicuiu.dumb1.com/4a05a07a04a08a09/The-Cheapskate-Bad-Boyfriends-by-Hank-Edwards.pdf
    • http://muicuiu.dumb1.com/2a09a06a07a09/Real-Live-Boyfriends-by-E-Lockhart.pdf
    • http://muicuiu.dumb1.com/4a02a07a01a07a09/The-Boy-Next-Story-A-Bookish-Boyfriends-Novel-by-Tiffany-Schmidt.pdf
    • http://muicuiu.dumb1.com/8a01a05a09/A-Date-with-Darcy-Bookish-Boyfriends-1-by-Tiffany-Schmidt.pdf
    • http://muicuiu.dumb1.com/3a01a04a08a01a07/Boyfriends-Burritos-amp-an-Ocean-of-Trouble-Real-Life-2-by-Nancy-N-Rue.pdf
    • http://muicuiu.dumb1.com/1a08a05a05a08a09/Queen-Bees-and-Wannabes-Helping-Your-Daughter-Survive-Cliques-Gossip-Boyfriends-and-the-New-Realities-of-Girl-World-by-Rosalind-Wiseman.pdf
    • http://muicuiu.dumb1.com/7a06a01a02a07a08/The-Book-of-the-Thousand-Nights-and-One-Night-by-Anonymous.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.