Malicious PDF — malware analysis report

Static analysis result for SHA-256 ce5d5bb580486e16…

MALICIOUS

PDF

29.6 KB Created: 2019-05-01 09:24:23 +01:00 Authoring application: mPDF 5.7
MD5: b10ef6cb559997db3b5063342e40ac5e SHA-1: 3b719916035e8d174a608041cfa6ebef81f266f5 SHA-256: ce5d5bb580486e16107cf74d8535ee0628d3fda10cf7472f21976a5122b96dbe
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. While many of these URLs themselves appear benign, the sheer volume suggests a malicious intent, possibly for SEO manipulation or to redirect users to malicious content. The ML_NYX_PDF_MALICIOUS classifier also strongly indicated maliciousness. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9684

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/6a06a00a04a09a06/In-the-Peanut-Gallery-with-Mystery-Science-Theater-3000-Essays-on-Film-Fandom-Technology-and-the-Culture-of-Riffing-by-Robert-G-Weiner.pdf
    • http://muicuiu.dumb1.com/5a06a00a07a00a06/The-Mystery-Science-Theater-3000-Amazing-Colossal-Episode-Guide-by-Trace-Beaulieu.pdf
    • http://muicuiu.dumb1.com/5a00a09a03a02a04/Industrial-Enlightenment-Science-technology-and-culture-in-Birmingham-and-the-West-Midlands-1760-1820-by-Peter-M-Jones.pdf
    • http://muicuiu.dumb1.com/9a03a04a03a09a06/Interdisciplinary-Essays-on-Darwinism-in-Hispanic-Literature-and-Film-The-Intersection-of-Science-and-the-Humanities-by-Jerry-Hoeg.pdf
    • http://muicuiu.dumb1.com/8a02a07a01a07/Film-Form-Essays-In-Film-Theory-by-Sergei-Eisenstein.pdf
    • http://muicuiu.dumb1.com/4a05a02a09a06a08/Women-Science-and-Technology-A-Reader-in-Feminist-Science-Studies-by-Mary-Wyer.pdf
    • http://muicuiu.dumb1.com/4a07a02a05a06a08/The-Fandom-of-the-Operator-by-Robert-Rankin.pdf
    • http://muicuiu.dumb1.com/1a00a05a05a07a08a03/Unsolved-Problems-of-Co--And-Graft-Polymerization-Proceedings-of-the-First-S-R-Romanian-U-S-Seminar-on-Polymer-Science-Held-Under-the-Sponsorship-of-the-Romanian-National-Council-for-Science-and-Technology-Ncst-and-the-U-S-National-Science-Found-by-Otto-Vogl.pdf
    • http://muicuiu.dumb1.com/2a01a02a09a05/The-Culture-of-Bruising-Essays-on-Prizefighting-Literature-and-Modern-American-Culture-by-Gerald-Early.pdf
    • http://muicuiu.dumb1.com/1a00a08a05a08a02a03/Peanut-Gets-a-Job-Peanut-the-Mini-Horse-Book-3-by-Holly-Hunstad-Asbridge.pdf
    • http://muicuiu.dumb1.com/3a06a07a08a02a00/Long-for-This-World-The-Strange-Science-of-Immortality-by-Jonathan-Weiner.pdf
    • http://muicuiu.dumb1.com/2a06a08a05a02/The-Heirs-of-Anthony-Boucher-A-History-of-Mystery-Fandom-by-Marvin-Lachman.pdf
    • http://muicuiu.dumb1.com/7a00a05a00a01a05/National-Gallery-Uvre-Conservee-a-la-National-Gallery-Venus-a-Son-Miroir-Les-Ambassadeurs-an-Experiment-on-a-Bird-in-the-Air-Pump-Collection-de-La-National-Gallery-de-Londres-Les-Epoux-Arnolfini-Diptyque-de-Wilton-Immaculee-Conception-by-Source-Wikipedia.pdf
    • http://muicuiu.dumb1.com/1a04a03a01a07a00/Science-Fictions-A-Scientific-Mystery-a-Massive-Cover-Up-and-the-Dark-Legacy-of-Robert-Gallo-by-John-Crewdson.pdf
    • http://muicuiu.dumb1.com/5a01a06a03a02a05/The-Contested-Parterre-Public-Theater-and-French-Political-Culture-1680-1791-by-Jeffrey-S-Ravel.pdf
    • http://muicuiu.dumb1.com/3a07a06a00a07a01/Shooting-Gallery-An-Art-Lover-s-Mystery-2-by-Hailey-Lind.pdf
    • http://muicuiu.dumb1.com/1a00a03a05a08a09a03/Glucose-Syrups-Science-and-Technology-by-M-W-Kearsley.pdf
    • http://muicuiu.dumb1.com/8a02a04a08a06a04/Murder-at-the-Gallery-Northwest-Cozy-Mystery-6-by-Dianne-Harman.pdf
    • http://muicuiu.dumb1.com/2a06a07a05a02a00/Culture-Leading-Scientists-Explore-Societies-Art-Power-and-Technology-by-John-Brockman.pdf
    • http://muicuiu.dumb1.com/6a00a05a03a05a04/A-House-Made-of-Light-Essays-on-the-Art-of-Film-by-George-E-Toles.pdf
    • http://muicuiu.dumb1.com/9a03a04a03

Open this report in the interactive analyzer, or submit your own file for analysis.