Malicious PDF — malware analysis report

Static analysis result for SHA-256 d805286fac2a5c07…

MALICIOUS

PDF

16.2 KB Created: 2019-05-05 16:10:19 +01:00 Authoring application: mPDF 5.7
MD5: f99cfeb9ac80cbf2f2994541147091a9 SHA-1: eee2a5a3246d56c7aa0bb3a1b54cbd7d3c446441 SHA-256: d805286fac2a5c0755ffbdee12054ed96e9f773d42111f46abc46a4172e8172b
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF file contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. While the URLs themselves are currently marked as benign, the sheer volume and structure suggest a malicious intent, possibly for SEO poisoning or to distribute further malware. The ML_NYX_PDF_MALICIOUS classifier also flagged this file with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/2a01a03a01a07a08/The-Mysterious-Matter-of-I-M-Fine-by-Diane-Stanley.pdf
    • http://muicuiu.dumb1.com/1a06a06a04a00a06/Saving-Sky-by-Diane-Stanley.pdf
    • http://muicuiu.dumb1.com/3a04a07a09a03a04/The-Chosen-Prince-by-Diane-Stanley.pdf
    • http://muicuiu.dumb1.com/5a09a07a06a02/The-Cup-and-the-Crown-Silver-Bowl-2-by-Diane-Stanley.pdf
    • http://muicuiu.dumb1.com/1a02a04a03a02a00/Ada-Lovelace-The-Poet-of-Science-by-Diane-Stanley.pdf
    • http://muicuiu.dumb1.com/3a09a03a02a04a02/The-Mysterious-Case-Time-Card-1-by-Enzo-Silvestri.pdf
    • http://muicuiu.dumb1.com/1a08a00a05a06a08/Watson-s-Case-Sherlock-Academy-2-by-F-C-Shaw.pdf
    • http://muicuiu.dumb1.com/1a06a07a08a00a04/Watson-s-Case-Sherlock-Academy-2-by-F-C-Shaw.pdf
    • http://muicuiu.dumb1.com/3a06a04a01a09a07/The-Mysterious-Case-of-Mr-Strangeway-The-St-Croix-Chronicles-0-5-by-Karina-Cooper.pdf
    • http://muicuiu.dumb1.com/9a09a01a00a05a00/The-Mysterious-Affair-at-Styles-Poirot-s-First-Case-by-Agatha-Christie.pdf
    • http://muicuiu.dumb1.com/1a01a05a06a02a09a02/The-First-Case-of-Poirot-The-Mysterious-Affair-at-Styles-by-Agatha-Christie.pdf
    • http://muicuiu.dumb1.com/1a01a05a07a03a05a06/The-Mysterious-Affair-at-Styles-Hercule-Poirot-s-First-Case-by-Agatha-Christie.pdf
    • http://muicuiu.dumb1.com/1a09a01a05a04a04/Good-Queen-Bess-The-Story-of-Elizabeth-I-of-England-by-Diane-Stanley.pdf
    • http://muicuiu.dumb1.com/1a00a08a09a03a00a04/The-Marshmallow-Hammer-Detective-Agency-The-Mysterious-Case-of-the-Golden-Egg-by-Ernie-Lindsey.pdf
    • http://muicuiu.dumb1.com/5a06a05a04a06a08/The-Poudre-A-Photo-History-by-Stanley-R-Case.pdf
    • http://muicuiu.dumb1.com/8a06a03a05a03a01/The-Case-of-the-Restless-Redhead-by-Erle-Stanley-Gardner.pdf
    • http://muicuiu.dumb1.com/8a02a05a05a01a04/The-Case-of-the-Substitute-Face-by-Erle-Stanley-Gardner.pdf
    • http://muicuiu.dumb1.com/4a09a02a06a02a08/The-Case-of-the-Mischievous-Doll-by-Erle-Stanley-Gardner.pdf
    • http://muicuiu.dumb1.com/1a00a01a03a09a02a00/The-Case-of-the-Fiery-Fingers-by-Erle-Stanley-Gardner.pdf
    • http://muicuiu.dumb1.com/9a00a05a00a03a04/The-Case-of-the-Careless-Kitten-by-Erle-Stanley-Gardner.pdf
    • http://muicuiu.dumb1.com/1a01a05a06a02a09a02/The-First-Case-of-Poirot

Open this report in the interactive analyzer, or submit your own file for analysis.