Malicious PDF — malware analysis report

Static analysis result for SHA-256 da54ac4fd7ff707e…

MALICIOUS

PDF

17.6 KB Created: 2019-04-30 02:07:08 +01:00 Authoring application: mPDF 5.7
MD5: ed94d8e87b9c16be7cc800b568e1d89c SHA-1: 5b7cd644d2a0b23fa7ec1295ac7c97363bbaffa7 SHA-256: da54ac4fd7ff707e2b07d76cebc6e228f1704747b0da5274048713499f862e19
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDF documents, forming a link farm. This is indicative of a technique to distribute malicious content or to manipulate search engine results. The ML classifier also flagged this PDF with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/8a03a04a09a04a00/Nicolas-Poussin-Paintings-and-Drawings-in-Soviet-Museums-by-Nicolas-Poussin.pdf
    • http://muicuiu.dumb1.com/8a03a04a09a02a06/Nicolas-Poussin-The-Martyrdom-Of-Saint-Erasmus-Nicolas-Poussin-Le-Martyre-De-Saint-Erasme-by-Jane-Costello.pdf
    • http://muicuiu.dumb1.com/8a03a04a08a08a07/Seven-Sacraments-of-Nicolas-Poussin-by-Neil-Bartlett.pdf
    • http://muicuiu.dumb1.com/8a02a01a04a09a07/Nicolas-Poussin-40-Masterpieces-1627-64-by-Pierre-Rosenberg.pdf
    • http://muicuiu.dumb1.com/8a03a04a09a03a02/Nicolas-Poussin-His-Life-and-Work-by-Elisabeth-Harriet-Denio.pdf
    • http://muicuiu.dumb1.com/8a03a04a08a02a01/The-Drawings-Of-Poussin-by-Anthony-Blunt.pdf
    • http://muicuiu.dumb1.com/8a03a04a08a04a07/Poussin-Paintings-A-Catalogue-Raisonne-by-Christopher-Wright.pdf
    • http://muicuiu.dumb1.com/8a02a02a01a03a00/Rembrandt-Harmensz-Van-Rijn-Paintings-From-Soviet-Museums-by-Rembrandt.pdf
    • http://muicuiu.dumb1.com/1a03a06a03a07a02/The-Codex-Canadensis-and-the-Writings-of-Louis-Nicolas-The-Natural-History-of-the-New-World-Histoire-Naturelle-des-Indes-Occidentales-by-Louis-Nicolas.pdf
    • http://muicuiu.dumb1.com/8a03a04a08a00a06/Poussin-by-Howard-Hibbard.pdf
    • http://muicuiu.dumb1.com/8a03a04a08a07a01/Poussin-s-Secret-by-David-Wood.pdf
    • http://muicuiu.dumb1.com/8a03a04a08a01a07/Poussin-surprise-by-Ghislaine-Biondi.pdf
    • http://muicuiu.dumb1.com/7a08a04a03a08a01/Apprends-moi-faire-seul-by-Charlotte-Poussin.pdf
    • http://muicuiu.dumb1.com/8a03a04a08a02a08/Les-Enfants-du-Divorce-Psychologie-Separation-Parentale-2e-Ed-by-Poussin.pdf
    • http://muicuiu.dumb1.com/8a03a04a08a05a04/Memoirs-Of-The-Life-Of-Nicholas-Poussin-by-Maria-Graham.pdf
    • http://muicuiu.dumb1.com/8a03a04a09a03a05/C-zanne-and-Poussin-The-Classical-Vision-of-Landscape-by-Richard-Verdi.pdf
    • http://muicuiu.dumb1.com/1a00a05a03a03a07a00/Drawings-and-Paintings-by-Adolph-Menzel.pdf
    • http://muicuiu.dumb1.com/6a09a03a08a03a03/The-Works-of-Vincent-Van-Gogh-His-Paintings-and-Drawings-by-J-B-De-La-Faille.pdf
    • http://muicuiu.dumb1.com/8a03a01a04a03a02/Beatrix-Potter-s-Art-A-Selection-of-Paintings-and-Drawings-by-Anne-Stevenson-Hobbs.pdf
    • http://muicuiu.dumb1.com/5a08a04a04a04a02/Sabine-by-Nicolas-Freeling.pdf
    • http://muicuiu.dumb1.com/1a03a06a03a07a02/The-Codex-Canadensis-

Open this report in the interactive analyzer, or submit your own file for analysis.