Malicious PDF — malware analysis report

Static analysis result for SHA-256 ca9871549144c2b9…

MALICIOUS

PDF

13.4 KB Created: 2019-04-30 02:24:59 +01:00 Authoring application: mPDF 5.7
MD5: 51a9a1059c4aa9f5b9a9272b61309544 SHA-1: 446fbedff6a0794a3d17cca0dba76f02e9061bb3 SHA-256: ca9871549144c2b997d75671d621a347f4d474a878aae5ab149de7b92b7b73ef
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file was flagged by a machine learning classifier as malicious. Static analysis revealed a large number of embedded links, forming a link farm. These links likely serve as a lure to direct users to malicious websites or to download further malware. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9856

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/4a06a07a03a05a07/Rain-Fall-John-Rain-1-by-Barry-Eisler.pdf
    • http://muicuiu.dumb1.com/5a02a03a02a06/Winner-Take-All-John-Rain-3-by-Barry-Eisler.pdf
    • http://muicuiu.dumb1.com/1a03a03a05a01a00/Redemption-Games-John-Rain-4-by-Barry-Eisler.pdf
    • http://muicuiu.dumb1.com/3a03a06a02a00a06/Paris-Is-A-Bitch-John-Rain-6-5-by-Barry-Eisler.pdf
    • http://muicuiu.dumb1.com/3a08a01a03a01a02/Graveyard-of-Memories-John-Rain-8-by-Barry-Eisler.pdf
    • http://muicuiu.dumb1.com/3a02a06a03a02a05/The-Killer-Ascendant-John-Rain-6-by-Barry-Eisler.pdf
    • http://muicuiu.dumb1.com/1a02a02a04a07a03/A-Lonely-Resurrection-John-Rain-2-by-Barry-Eisler.pdf
    • http://muicuiu.dumb1.com/8a03a00a05a02/A-Clean-Kill-in-Tokyo-John-Rain-1-by-Barry-Eisler.pdf
    • http://muicuiu.dumb1.com/2a05a09a01a00a02/Forever-Rain-Rain-Will-Fall-1-by-Cindy-Lou-Moldovan.pdf
    • http://muicuiu.dumb1.com/3a01a03a00a01a01/Rain-At-Main-Event-by-Rain-Fields.pdf
    • http://muicuiu.dumb1.com/1a01a06a07a03a04/Action-Hero-Rain-by-Rain-Fields.pdf
    • http://muicuiu.dumb1.com/4a00a07a06a00a04/Rain-Undead-Rain-1-by-Shaun-Harbinger.pdf
    • http://muicuiu.dumb1.com/9a01a08a00a00a01/Some-Rain-Must-Fall-And-Other-Stories-by-Michel-Faber.pdf
    • http://muicuiu.dumb1.com/7a02a08a06a09/The-Rain-The-Rain-1-by-Virginia-Bergin.pdf
    • http://muicuiu.dumb1.com/5a04a09a07a09a00/Rain-Rain-Smurf-Away-by-Peyo.pdf
    • http://muicuiu.dumb1.com/3a03a07a04a06a07/The-Fall-of-Rain-The-Emerald-Isle-Trilogy-3-by-Renee-Vincent.pdf
    • http://muicuiu.dumb1.com/4a05a09a03a05a02/In-All-This-Rain-by-John-Stone.pdf
    • http://muicuiu.dumb1.com/1a01a09a00a01a08a07/Desert-Rain-by-John-Wyver.pdf
    • http://muicuiu.dumb1.com/4a05a04a09a07a06/A-Hard-Winter-Rain-by-John-Inman.pdf
    • http://muicuiu.dumb1.com/1a08a07a06a02a09/And-a-Hard-Rain-Fell-by-John-Ketwig.pdf
    • http://muicuiu.dumb1.com/1a01a0

Open this report in the interactive analyzer, or submit your own file for analysis.