PDF malware analysis — malicious · d8ad9823735bb501

MALICIOUS

PDF

287.2 KB Created: 2020-11-13 09:19:00 +02:00 Authoring application: wkhtmltopdf 0.12.5 (via Qt 4.8.7)

MD5: 1582eac373fb61a9c39aa720631c5107 SHA-1: d928cc6923289c14d86b25f17a0b686d9676ad1b SHA-256: d8ad9823735bb501f1178357864de6b113ed5cdfc3bf009198f4e7593c342c0b

152 Risk Score

Malware Insights

MITRE ATT&CK

T1566.001 Spearphishing Attachment

The PDF contains a link to known malicious redirector infrastructure, identified by the PDF_MALICIOUS_REDIRECTOR_LINK heuristic. The ML classifier also flagged the document with high confidence. The embedded URL likely leads to a phishing or malware distribution site, attempting to lure the user into downloading further malicious content or providing sensitive information.

Machine Learning

Nyx PDF Classifier malicious score 0.9335

Heuristics 3

PDF links to known malicious redirector infrastructure critical PDF_MALICIOUS_REDIRECTOR_LINK

PDF contains a clickable URI to redirector infrastructure used by a known malicious PDF SEO/adware delivery campaign. These documents typically rely on user interaction and redirect chains rather than a PDF parser vulnerability.
ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL https://ggtraff.ru/aws?utm_term=cachethq+incident+template
- https://muwamobole.weebly.com/uploads/1/3/4/3/134356931/6980018.pdf
- https://xelabuxu.weebly.com/uploads/1/3/4/2/134235382/4295d3dc249a0.pdf
- https://saxibodusazo.weebly.com/uploads/1/3/0/7/130740440/jurefabisodiruze.pdf
- https://cdn-cms.f-static.net/uploads/4409096/normal_5f9895b4bd1c6.pdf
- https://sidonakitipu.weebly.com/uploads/1/3/4/6/134631457/fa680cbec8b9.pdf
- https://s3.amazonaws.com/kavitokolezub/hunger_games_catching_fire_free_online_book.pdf
- https://s3.amazonaws.com/woberiz/django_python_tutorial.pdf
- https://s3.amazonaws.com/subud/vowufazegelegijuvug.pdf
- https://s3.amazonaws.com/vasofirida/vupodifedizisotew.pdf
- https://s3.amazonaws.com/bodepova/jutizorolajoropaduxepunew.pdf
- https://s3.amazonaws.com/zetare/36554251895.pdf
- https://uploads.strikinglycdn.com/files/e689fca6-cfb8-4ffe-905a-4737c9921722/navy_uniform_regulations_2019.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.