Malicious PDF — malware analysis report

Static analysis result for SHA-256 d857bc6415bd1155…

MALICIOUS

PDF

28.0 KB Created: 2019-05-02 01:29:35 +01:00 Authoring application: mPDF 5.7
MD5: e4041a6f1da3878e77f4285765f7c968 SHA-1: 583b5d25828e0391337561229fd3432b61839a41 SHA-256: d857bc6415bd1155c5957faa93b9d05ccacb9a639540b54dab51c086b7f0585d
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, pointing to external websites. While many of these URLs were classified as benign, the sheer volume and the ML_NYX_PDF_MALICIOUS classification suggest a malicious intent, possibly for SEO manipulation or to host further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9695

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://seasasac.lflinkup.com/7da5da9da7da8da7/Where-Have-All-the-Westerns-Gone-Essays-on-Western-Film-by-Charlie-LeSueur.pdf
    • http://seasasac.lflinkup.com/7da5da9da9da0da7/The-legends-live-on-Interviews-with-the-cowboy-stars-of-the-silver-screen-by-Charlie-LeSueur.pdf
    • http://seasasac.lflinkup.com/9da8da7da1da0/Legacy-Of-An-Outlaw-A-Jason-Peares-Western-Jason-Peares-Westerns-Book-2-by-Jeffrey-Poston.pdf
    • http://seasasac.lflinkup.com/7da5da9da9da1da6/Natacha-Lesueur-Villa-Arson-11-Mai-7-Juillet-1996-Galerie-Evelyne-Canus-30-Aout-5-Octobre-1996-by-Natacha-Lesueur.pdf
    • http://seasasac.lflinkup.com/2da1da3da0da5da6/The-Children-of-the-Red-King-Books-1-5-Midnight-for-Charlie-Bone-Charlie-Bone-and-the-Time-Twister-Charlie-Bone-and-the-Invisible-Boy-Charlie-Bone-and-the-Castle-of-Mirrors-and-Charlie-Bone-and-the-Hidden-King-by-Jenny-Nimmo.pdf
    • http://seasasac.lflinkup.com/6da6da0da4da9da6/In-the-Peanut-Gallery-with-Mystery-Science-Theater-3000-Essays-on-Film-Fandom-Technology-and-the-Culture-of-Riffing-by-Robert-G-Weiner.pdf
    • http://seasasac.lflinkup.com/6da1da5da9da7da3/Articles-on-Films-Directed-by-Sam-Mendes-Including-American-Beauty-Film-Road-to-Perdition-Jarhead-Film-Revolutionary-Road-Film-Away-We-Go-by-Hephaestus-Books.pdf
    • http://seasasac.lflinkup.com/5da3da7da3da2da1/Westerns-Aspects-of-a-Movie-Genre-by-Philip-French.pdf
    • http://seasasac.lflinkup.com/1da5da8da1da0/Movies-into-Film-Film-Criticism-1967-1970-by-John-Ivan-Simon.pdf
    • http://seasasac.lflinkup.com/5da2da5da1da4da2/Film-Letton-Le-Bal-Des-Lucioles-Midsummer-Madness-Film-2007-Lotte-from-Gadgetville-Les-Trois-Mousquetaires-by-Livres-Groupe.pdf
    • http://seasasac.lflinkup.com/1da0da5da1da0da4da7/Woody-Allen-Film-by-Film-by-Jason-Solomons.pdf
    • http://seasasac.lflinkup.com/9da6da9da6da7da2/Film-Service-Profiles-A-Directory-Of-Organizations-Offering-Services-To-Independent-Filmmakers-And-Film-Users-In-New-York-State-by-Kay-Salz.pdf
    • http://seasasac.lflinkup.com/1da1da3da1da4da7da4/Gardner-s-Art-through-the-Ages-The-Western-Perspective-Volume-II-with-ArtStudy-CD-ROM-2-1-Western-by-Fred-S-Kleiner.pdf
    • http://seasasac.lflinkup.com/4da2da1da0da8da7/A-Century-of-Great-Western-Stories-An-Anthology-of-Western-Fiction-by-John-Jakes.pdf
    • http://seasasac.lflinkup.com/1da8da4da2da3da1/Charlie-and-the-Great-Glass-Elevator-Charlie-Bucket-2-by-Roald-Dahl.pdf
    • http://seasasac.lflinkup.com/7da2da6da2da1da6/Je-suis-Charlie-Chronologie-de-l-attaque-terroriste-contre-Charlie-Hebdo-by-Josh-Seyward.pdf
    • http://seasasac.lflinkup.com/7da5da9da9da0da6/Fragments-of-a-Romance-by-H-D-LeSueur.pdf
    • http://seasasac.lflinkup.com/4da0da1da1da7da4/Charlie-and-the-Chocolate-Factory-Charlie-Bucket-1-by-Roald-Dahl.pdf
    • http://seasasac.lflinkup.com/8da9da4da4da1da1/Charlie-And-The-Great-Glass-Elevator-The-Further-Adventures-Of-Charlie-Bucket-And-Willy-Wonka-Chocolate-Maker-Extraordinary-by-Roald-Dahl.pdf
    • http://seasasac.lflinkup.com/7da5da9da7da5da5/Rites-of-Ancient-Ripening-by-Meridel-LeSueur.pdf
    • http://seasasac.lflinkup.com/2da1da3da0da5da6/The-Children-of-the-Red-King-Books-1-5-Midnight-for-Charlie-Bone-Charlie-Bone-and-the-Time-Twister-Charlie-Bone-and-t

Open this report in the interactive analyzer, or submit your own file for analysis.