Malicious PDF — malware analysis report

Static analysis result for SHA-256 cfb412d2b0b51d37…

MALICIOUS

PDF

17.3 KB Created: 2019-04-30 01:54:47 +01:00 Authoring application: mPDF 5.7
MD5: 4ee748970927ff75b3ed780b129aeaba SHA-1: 1f51f65000a4dce64b584209a0cc4186d17cce89 SHA-256: cfb412d2b0b51d37f1c1afce66960c219e839fb6b0ab56a6073c17c960450358
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged the document as malicious. While the document body is heavily obfuscated, the presence of numerous links suggests a social engineering tactic to direct the user to external, potentially malicious, resources. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9787

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/2a07a00a07a09a08/Smashing-the-Gates-of-the-Enemy-Through-Strategic-Prayers-by-Taiwo-Olusegun-Ayeni.pdf
    • http://muicuiu.dumb1.com/2a07a00a08a03a02/Help-for-Troubled-Destinies-by-Taiwo-Olusegun-Ayeni.pdf
    • http://muicuiu.dumb1.com/7a04a05a04a09a03/The-Extension-The-Smashing-Book-3-1-3-by-Smashing-Magazine.pdf
    • http://muicuiu.dumb1.com/1a00a02a00a06a06a06/Krieg-der-Ratten-Duell-in-Stalingrad-Enemy-at-the-gates-by-David-L-Robbins.pdf
    • http://muicuiu.dumb1.com/1a08a03a03a07a03/Strategic-Action-for-Animals-A-Handbook-on-Strategic-Movement-Building-Organizing-and-Activism-for-Animal-Liberation-by-Melanie-Joy.pdf
    • http://muicuiu.dumb1.com/1a00a02a01a05a04a08/Prayers-to-Move-Your-Mountains-Powerful-Prayers-for-the-Spirit-Filled-Life-by-Michael-Klassen.pdf
    • http://muicuiu.dumb1.com/6a09a01a00a06a08/Broken-Gates-The-P-J-Stone-Gates-Trilogy-2-by-D-T-Dyllin.pdf
    • http://muicuiu.dumb1.com/3a02a05a02a04a06/Hidden-Gates-The-P-J-Stone-Gates-Trilogy-1-by-D-T-Dyllin.pdf
    • http://muicuiu.dumb1.com/3a07a03a05a02a00/Tom-Gates-is-Absolutely-Fantastic-at-Some-Things-Tom-Gates-5-by-Liz-Pichon.pdf
    • http://muicuiu.dumb1.com/4a02a05a06a02a05/Enemy-Mine-Enemy-2-5-by-Marcella-Burnard.pdf
    • http://muicuiu.dumb1.com/1a04a00a05a00a05/Smashing-Physics-by-Jon-Butterworth.pdf
    • http://muicuiu.dumb1.com/1a00a07a01a05a09/Agog-Smashing-Stories-by-Cat-Sparks.pdf
    • http://muicuiu.dumb1.com/1a00a05a06a05a01/The-Smashing-Saxons-by-Terry-Deary.pdf
    • http://muicuiu.dumb1.com/1a00a04a04a05a00a04/Smashing-Node-Js-JavaScript-Everywhere-by-Guillermo-Rauch.pdf
    • http://muicuiu.dumb1.com/2a06a02a00a08a07/Enemy-Of-My-Enemy-by-Travis-Casey.pdf
    • http://muicuiu.dumb1.com/1a01a09a05a07a01/Dance-with-the-Enemy-The-Enemy-1-by-Rob-Sinclair.pdf
    • http://muicuiu.dumb1.com/7a07a07a07a03a01/Rise-of-the-Enemy-The-Enemy-2-by-Rob-Sinclair.pdf
    • http://muicuiu.dumb1.com/1a01a02a02a00a07a09/Smashing-the-Stained-Glass-Ceiling-by-Maureen-Fiedler.pdf
    • http://muicuiu.dumb1.com/3a07a03a05a01a04/Tom-Gates-Yes-No-Maybe-Tom-Gates-8-by-Liz-Pichon.pdf
    • http://muicuiu.dumb1.com/7a07a09a03a02a00/Strategic-Management-by-Garth-Saloner.pdf
    • http://muicuiu.dumb1.com/1a08a03a03a07a03/Strategic-Action-for-Animals-A-Handbook-on-Strategic-Movement-Building-Organizi

Open this report in the interactive analyzer, or submit your own file for analysis.