Malicious PDF — malware analysis report

Static analysis result for SHA-256 d0ef6fb77dd225ab…

MALICIOUS

PDF

17.7 KB Created: 2019-05-02 05:30:33 +01:00 Authoring application: mPDF 5.7 First seen: 2021-02-09
MD5: 397710bfa819bc4455b2f5786bd59bf7 SHA-1: c0ac45220f0c08a7948a31e8342575f62b23937c SHA-256: d0ef6fb77dd225ab4b2da382f206c016847e143b5c5a92cf03df3c5bc104c46a
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9788

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/6737736735732739/Le-Tombeau-de-Pierre-Pierre-Gripari-1925-1990-by-Jean-Charles-Angrand.pdf In PDF document text
    • http://cefasfese.4pu.com/9737734730735735/Old-Mother-Hubbard-s-Mixed-Up-Cupboard-A-Collection-Of-Tangled-Tales-by-Sameena-Michelle-Bachmeier.pdfIn PDF document text
    • http://cefasfese.4pu.com/7738734737737732/The-Collected-Tales-by-Pierre-Lou-s.pdfIn PDF document text
    • http://cefasfese.4pu.com/4739734738730733/Tales-of-Aradia-The-Last-Witch-Tales-of-Aradia-1-by-Magnum-Opus.pdfIn PDF document text
    • http://cefasfese.4pu.com/2739733736738733/Tales-of-Aradia-the-Last-Witch-Volume-3-by-L-A-Jones.pdfIn PDF document text
    • http://cefasfese.4pu.com/3730733734735733/The-Boy-In-The-Cupboard-by-Shane-Dunphy.pdfIn PDF document text
    • http://cefasfese.4pu.com/3730737731730736/Cupboard-Kisses-by-Barbara-Metzger.pdfIn PDF document text
    • http://cefasfese.4pu.com/1730732730735731739/The-full-cupboard-of-life-by-Diane-Haeger.pdfIn PDF document text
    • http://cefasfese.4pu.com/2735737738738732/The-Magic-Broom-by-Teegan-Loy.pdfIn PDF document text
    • http://cefasfese.4pu.com/6731736737738736/A-Year-and-a-Day-by-Isabelle-Broom.pdfIn PDF document text
    • http://cefasfese.4pu.com/3733730736735738/Butcher-s-Broom-by-Neil-M-Gunn.pdfIn PDF document text
    • http://cefasfese.4pu.com/6737733737733730/Broom-Zoom-by-Caron-Lee-Cohen.pdfIn PDF document text
    • http://cefasfese.4pu.com/6731734736737/The-Widow-s-Broom-by-Chris-Van-Allsburg.pdfIn PDF document text
    • http://cefasfese.4pu.com/7737732739737735/The-Amazing-Adventures-of-Aaron-Broom-by-A-E-Hotchner.pdfIn PDF document text
    • http://cefasfese.4pu.com/3734730730735733/Star-Wars-Tales-Omnibus-Tales-from-the-Mos-Eisley-Cantina-Tales-of-the-Bounty-Hunters-and-Tales-from-Jabba-s-Palace-by-Kevin-J-Anderson.pdfIn PDF document text
    • http://cefasfese.4pu.com/4733737735736730/Cycling-to-the-Ashes-A-Cricketing-Odyssey-From-London-to-Brisbane-by-Oli-Broom.pdfIn PDF document text
    • http://cefasfese.4pu.com/5733737736738735/Pierre-Deux-s-Brittany-Pierre-Moulin-by-Linda-Dannenberg.pdfIn PDF document text
    • http://cefasfese.4pu.com/5734733736733733/La-Seduction-Policiere-Signes-de-Croissance-D-Un-Genre-Repute-Mineur-Pierre-Magnan-Daniel-Pennac-Et-Quelques-Autres-by-Pierre-Verdaguer.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731730730739739733/Witch-Children-From-Salem-Witch-Hunts-to-Modern-Courtrooms-by-Hans-Sebald.pdfIn PDF document text
    • http://cefasfese.4pu.com/5734737735733730/La-vie-amoureuse-de-Pierre-de-Ronsard-by-Pierre-de-Nolhac.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.