Malicious PDF — malware analysis report

Static analysis result for SHA-256 c805e777ca2e4e44…

MALICIOUS

PDF

19.9 KB Created: 2019-04-30 05:28:29 +01:00 Authoring application: mPDF 5.7
MD5: 9a790baebb42068b70f4f5a8b6e1aa1e SHA-1: d6a3ccc1fcbb623a7c77c67f28d0a6846e87fafd SHA-256: c805e777ca2e4e44ae230d6713636a9e97a02844438f7a5480d2be2aef1b9088
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF was flagged by a critical heuristic for containing a large farm of external links, suggesting a link-farming or redirection attack. While the document body is unreadable, the presence of numerous links, many pointing to book-related titles, indicates a potential lure or SEO manipulation tactic. The ML classifier also strongly indicated maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9922

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://seasasac.lflinkup.com/2da7da5da7da6da0/Rock-Your-Plot-A-Simple-System-for-Plotting-Your-Novel-Rock-Your-Writing-1-by-Cathy-Yardley.pdf
    • http://seasasac.lflinkup.com/8da0da4da9da9da1/It-s-not-only-rock-n-roll-Sexe-drogues-et-sagesse-du-rock-by-Catherine-Viale.pdf
    • http://seasasac.lflinkup.com/1da8da6da2da7da7/Rock-Rod-Studios-Presents-Opening-Alex-Rock-Rod-2-by-Emory-Vargas.pdf
    • http://seasasac.lflinkup.com/4da9da8da2da0da7/Rock-of-Ages-The-Rolling-Stone-History-of-Rock-and-Roll-by-Ed-Ward.pdf
    • http://seasasac.lflinkup.com/7da2da2da9da0da9/Rock-Climbing-Desert-Rock-III-Moab-to-Colorado-National-Monument-by-Eric-Bjornstad.pdf
    • http://seasasac.lflinkup.com/1da1da3da7da4da3da2/The-Rock-Star-s-Secret-Baby-Rock-Stars-in-Disguise-Book-5-Cadell-by-Blair-Babylon.pdf
    • http://seasasac.lflinkup.com/7da7da4da4da8da6/The-Sound-and-the-Fury-40-Years-of-Classic-Rock-Journalism-A-Rock-s-Backpages-Reader-by-Barney-Hoskyns.pdf
    • http://seasasac.lflinkup.com/4da4da1da8da9da9/All-Roots-Lead-to-Rock-Legends-of-Early-Rock-n-Roll-A-Bear-Family-Reader-by-Colin-Escott.pdf
    • http://seasasac.lflinkup.com/4da4da1da8da6da6/Life-on-Planet-Rock-From-Guns-N-Roses-to-NIRVana-a-Backstage-Journey-Through-Rock-s-Most-Debauched-Decade-by-Lonn-Friend.pdf
    • http://seasasac.lflinkup.com/3da2da7da3da4da8/Rock-Addiction-Rock-Kiss-1-by-Nalini-Singh.pdf
    • http://seasasac.lflinkup.com/3da2da5da0da3da9/L-A-Woman-by-Cathy-Yardley.pdf
    • http://seasasac.lflinkup.com/1da8da2da3da8da0/The-Rock-Says-by-Dwayne-39-The-Rock-39-Johnson.pdf
    • http://seasasac.lflinkup.com/1da8da0da4da0da4/Rock-War-Rock-War-1-by-Robert-Muchamore.pdf
    • http://seasasac.lflinkup.com/6da2da8da0da8/Big-Rock-Big-Rock-1-by-Lauren-Blakely.pdf
    • http://seasasac.lflinkup.com/1da8da8da9da8da7/Level-Up-Fandom-Hearts-1-by-Cathy-Yardley.pdf
    • http://seasasac.lflinkup.com/2da1da7da1da2da9/The-Player-s-Club-Finn-by-Cathy-Yardley.pdf
    • http://seasasac.lflinkup.com/4da8da4da2/Rock-Chick-Reawakening-Rock-Chick-0-5-1001-Dark-Nights-52-by-Kristen-Ashley.pdf
    • http://seasasac.lflinkup.com/9da0da2da3da3da1/7th-Heaven-and-the-Rock-n-roll-Kids-Rock-n-roll-to-the-Rescue-Art-and-Introduction-by-Roy-Adorjan.pdf
    • http://seasasac.lflinkup.com/4da4da1da9da0da6/Psychedelic-Renegades-With-Photographs-of-Syd-Barrett-by-Mick-Rock-by-Mick-Rock.pdf
    • http://seasasac.lflinkup.com/7da5da8da2da3/Rock-n-Roll-Promises-Rock-n-Roll-Paraphantasy-1-by-AmBear-Shellea.pdf
    • http://seasasac.lflinkup.com/1da1da3da7da4da3da2/The-Rock-Star-s-Secret-

Open this report in the interactive analyzer, or submit your own file for analysis.