Malicious PDF — malware analysis report

Static analysis result for SHA-256 de8fdbaa69d550e7…

MALICIOUS

PDF

23.3 KB Created: 2020-03-20 17:00:43 +00:00 Authoring application: mPDF 5.7
MD5: 7d2738cbe67b99b078326378a6a263df SHA-1: 02e29d380869f48b845c45f381da51002e9fe6b6 SHA-256: de8fdbaa69d550e7ba97d20828065fec0b2f26a2d1dbb2354a3cb56b73b17a1e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links pointing to external PDF documents on the domain 'eascasas.myhome.cx'. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier also strongly flagged this PDF as malicious. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9903

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://eascasas.myhome.cx/8aa8aa9aa2aa5aa2/The-Prayers-of-the-Bible-by-John-E-McFadyen.pdf
    • http://eascasas.myhome.cx/8aa8aa9aa2aa5aa1/Prayers-of-the-Bible-Pulpit-Legends-by-John-Edgar-McFadyen.pdf
    • http://eascasas.myhome.cx/8aa8aa9aa2aa0aa8/Open-Door-on-John-by-Phillip-McFadyen.pdf
    • http://eascasas.myhome.cx/8aa8aa9aa1aa5aa6/Introduction-To-The-Old-Testament-by-John-Edgar-McFadyen.pdf
    • http://eascasas.myhome.cx/5aa1aa0aa5aa6/The-MacArthur-Daily-Bible-Read-through-the-Bible-in-one-year-with-notes-from-John-MacArthur-by-Anonymous.pdf
    • http://eascasas.myhome.cx/1aa0aa2aa1aa5aa4aa8/Prayers-to-Move-Your-Mountains-Powerful-Prayers-for-the-Spirit-Filled-Life-by-Michael-Klassen.pdf
    • http://eascasas.myhome.cx/7aa6aa4aa1aa6aa5/Book-of-Catholic-Prayers---Prayers-for-Every-Day---by-Romain-Kito.pdf
    • http://eascasas.myhome.cx/6aa6aa0aa2aa4aa8/40-Prayers-for-Nurses-40-Prayers-Series-by-Marlene-Graeve.pdf
    • http://eascasas.myhome.cx/4aa5aa6aa4aa0aa4/Healing-and-Deliverance-Prayers-for-Gays-and-Lesbians-the-Midnight-Gate-Prayers-to-Heal-Cure-and-Deliver-from-Homosexuality-by-Anthony-O-Akerele.pdf
    • http://eascasas.myhome.cx/2aa7aa1aa2aa9aa5/Prayers-That-Rout-Demons-and-Break-Curses-by-John-Eckhardt.pdf
    • http://eascasas.myhome.cx/8aa0aa7aa7aa2aa9/King-James-The-Holy-Bible-the-bible-bible-bible-study-jesus-religion-religious-heaven-king-james-old-testament-new-testament-prayer-books-christian-by-Anonymous.pdf
    • http://eascasas.myhome.cx/9aa1aa2aa9aa7aa6/Inspired-By-The-Bible-Experience-The-Complete-Bible-Audio-CD-A-Dramatic-Audio-Bible-Performed-by-400-of-Today-s-Biggest-Stars-by-Anonymous.pdf
    • http://eascasas.myhome.cx/1aa1aa7aa2aa1aa2aa0/Testament-The-Bible-and-History-by-John-Romer.pdf
    • http://eascasas.myhome.cx/4aa6aa7aa2aa9/The-Neon-Bible-by-John-Kennedy-Toole.pdf
    • http://eascasas.myhome.cx/7aa8aa4aa5aa4aa1/Terrorism-Jihad-and-the-Bible-by-John-F-MacArthur-Jr-.pdf
    • http://eascasas.myhome.cx/1aa1aa7aa2aa3aa5aa3/John---The-People-s-Bible-by-Gary-P-Baumler.pdf
    • http://eascasas.myhome.cx/1aa1aa7aa2aa5aa4aa2/John---People-s-Bible-Commentary-by-Baumler-Gary-P.pdf
    • http://eascasas.myhome.cx/8aa2aa4aa6aa7aa9/The-Mirror-of-Martyrs-in-a-Short-Vieuu-Lively-Expressing-the-Force-of-Their-Faith-the-Feruency-of-Their-Loue-the-Wisedome-of-Their-Sayings-the-Patience-of-Their-Suffrings-Etc-With-Their-Prayers-and-Preparation-for-Their-Last-Farevvell-1613-by-John-Bradford.pdf
    • http://eascasas.myhome.cx/5aa3aa7aa8aa9aa7/The-Biographical-Bible-Exploring-the-Biblical-Narrative-from-Adam-and-Eve-to-John-of-Patmos-by-Ruth-A-Tucker.pdf
    • http://eascasas.myhome.cx/7aa5aa9aa6aa9aa4/Holy-Bible-1-Minute-Bible-4-Students-With-366-Devotions-for-Daily-Living-by-Anonymous.pdf
    • http://eascasas.myhome.cx/4aa5aa6aa4aa0aa4/Healing-and-Deliverance-Prayers

Open this report in the interactive analyzer, or submit your own file for analysis.