PDF malware analysis — malicious · cd268ec25731355a

MALICIOUS

PDF

58.2 KB Created: 2020-12-19 00:15:55 +02:00 Authoring application: wkhtmltopdf 0.12.5 (via Qt 4.8.7)

MD5: bfbf60a2735fb624bba5fbb894e6dd51 SHA-1: 7a689b78bac9b98ac41c499e184892b35d41388c SHA-256: cd268ec25731355a01d760ea30dfcddd3ea3ac0a3de7e149c26f03f5fc44f8fd

94 Risk Score

Malware Insights

MITRE ATT&CK

T1566.001 Spearphishing Attachment

The file is a PDF document that contains an embedded URL pointing to a suspicious domain. ClamAV and ML classifiers flagged this PDF as malicious, specifically as a phishing trojan. The document body, though heavily obfuscated, appears to reference a Casio keyboard manual, suggesting a social engineering lure to drive traffic to the malicious URL.

Machine Learning

Nyx PDF Classifier malicious score 0.9055

Heuristics 3

ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
External URI info PDF_URI

PDF contains an external URL action
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL https://traffking.ru/strik?utm_term=casio+privia+px+130+manual+espa%25C3%25B1ol
- https://s3.amazonaws.com/pazatuv/1080p_bollywood_old_video_songs_free.pdf
- https://static1.squarespace.com/static/5fc18de7affbf90a66ef1cd7/t/5fd03f6648ae4d1218fb60af/1607483243414/ruxog.pdf
- https://s3.amazonaws.com/pezofut/rifiwuperelu.pdf
- https://uploads.strikinglycdn.com/files/17a0554b-64e3-4f9f-9962-1872b6fc01df/11822490894.pdf
- https://uploads.strikinglycdn.com/files/0946aa0b-b94f-444b-8057-eef305ae8a85/resekudakeripib.pdf
- https://static1.squarespace.com/static/5fc64899f9866f3fd2f86f4e/t/5fd5fd1b89566e781f44c798/1607859486308/corporation_tax_loss_relief_reform.pdf
- https://static1.squarespace.com/static/5fc5d1f60a2757459b04aa97/t/5fd0ee1c65d4c21e5f9a208c/1607527966329/marketing_strategies_definition_by_philip_kotler.pdf
- https://static1.squarespace.com/static/5fcebd97fba3275400774588/t/5fd6402872b1137fa97142c4/1607876652072/vawun.pdf
- https://uploads.strikinglycdn.com/files/74c2b31f-1b20-438b-baf4-2bdcec080780/lesson_8.5_practice_a_geometry_answers.pdf
- https://s3.amazonaws.com/gogonof/soul_worker_soul_sequence_concrete_jungle.pdf
- https://uploads.strikinglycdn.com/files/a571f32d-7417-499e-8d4b-aa2d76de2e2f/fisegemifapizifigikag.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.