Malicious PDF — malware analysis report

Static analysis result for SHA-256 c8006a6ade5ce940…

MALICIOUS

PDF

21.6 KB Created: 2019-04-30 02:55:36 +01:00 Authoring application: mPDF 5.7
MD5: ef3c0952eff89cd5b57d44a7e5c3a6d1 SHA-1: e18b5e822794d1f6f98f77a0031443e6fe6808fd SHA-256: c8006a6ade5ce940949619cd5816b76d339ad71d9c2bee311f335def02f81838
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded URLs, constituting a link farm. This is a common technique for SEO poisoning or distributing malicious content. The ML classifier also flagged this PDF with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/9a09a03a05a04a07/Marriage-The-Unbroken-Marriage---10-Ways-to-Grow-Together-As-A-Couple-And-Save-Your-Marriage-Marriage-Of-Convenience-Marriage-Matters-Marriage-Help-Marriage-Bargain-Marriage-Help-Books-by-Sarah-Riedel.pdf
    • http://muicuiu.dumb1.com/1a00a04a06a09a02a09/The-Lavender-House-by-Hilary-Boyd.pdf
    • http://muicuiu.dumb1.com/7a04a03a02a01/Thursdays-in-the-Park-by-Hilary-Boyd.pdf
    • http://muicuiu.dumb1.com/3a03a09a06a06a06/Thursdays-in-the-Park-by-Hilary-Boyd.pdf
    • http://muicuiu.dumb1.com/7a09a00a04a05a06/Four-Letters-of-Comforts-for-the-Deaths-of-the-Earle-of-Hadingtoun-and-of-the-Lord-Boyd-1640-by-Zacharie-Boyd.pdf
    • http://muicuiu.dumb1.com/7a09a00a04a05a05/Selected-Sermons-of-Zachary-Boyd-by-Zacharie-Boyd.pdf
    • http://muicuiu.dumb1.com/1a09a07a07a02a04/A-Desirable-Residence-by-Madeleine-Wickham.pdf
    • http://muicuiu.dumb1.com/8a04a04a07a07a04/Blufire-Desirable-Creatures-2-by-E-J-Squires.pdf
    • http://muicuiu.dumb1.com/4a01a07a04a00a00/Standing-In-Two-Circles-The-Collected-Works-Of-Boyd-Rice-by-Boyd-Rice.pdf
    • http://muicuiu.dumb1.com/5a00a01a07a05a03/Hilary-Knight-s-The-Twelve-Days-of-Christmas-by-Hilary-Knight.pdf
    • http://muicuiu.dumb1.com/4a04a06a00a09a05/Marriage-a-History-From-Obedience-to-Intimacy-or-How-Love-Conquered-Marriage-by-Stephanie-Coontz.pdf
    • http://muicuiu.dumb1.com/8a04a00a00a02a02/Making-Your-Marriage-Work-Maama-s-Practical-Wisdom-for-a-Lasting-Happy-Marriage-by-Eyitayo-Dada.pdf
    • http://muicuiu.dumb1.com/4a08a09a00a02a02/The-Marriage-Mistake-Marriage-to-a-Billionaire-3-by-Jennifer-Probst.pdf
    • http://muicuiu.dumb1.com/2a07a02a07a00a09/The-Marriage-Merger-Marriage-to-a-Billionaire-4-by-Jennifer-Probst.pdf
    • http://muicuiu.dumb1.com/4a01a03a09a05/The-Marriage-Mistake-Marriage-to-a-Billionaire-3-by-Jennifer-Probst.pdf
    • http://muicuiu.dumb1.com/2a03a07a05a03a09/A-Consumer-s-Dictionary-of-Food-Additives-Descriptions-in-Plain-English-of-More-Than-12-000-Ingredients-Both-Harmful-and-Desirable-Found-in-Foods-by-Ruth-Winter.pdf
    • http://muicuiu.dumb1.com/2a00a03a06a02a06/Hilary-Knight-s-Cinderella-by-Hilary-Knight.pdf
    • http://muicuiu.dumb1.com/2a09a04a03a04a07/Slightly-Foxed----but-Still-Desirable-Ronald-Searle-s-Wicked-World-of-Book-Collecting-by-Ronald-Searle.pdf
    • http://muicuiu.dumb1.com/2a05a07a00a04a03/WILL-by-Maria-Boyd.pdf
    • http://muicuiu.dumb1.com/7a07a01a09a06a00/The-Key-to-Susanna-by-Hilary-Norman.pdf
    • http://muicuiu.dumb1.com/7a09a00a04a05a05/Selected-Sermons-of-Zachar

Open this report in the interactive analyzer, or submit your own file for analysis.