Malicious PDF — malware analysis report

Static analysis result for SHA-256 debd0ff1600105c2…

MALICIOUS

PDF

26.3 KB Created: 2019-05-02 05:48:10 +01:00 Authoring application: mPDF 5.7
MD5: 69e7fb01f49e2f3cd893b25f8eac975a SHA-1: 7eb0a5c9a933d7b47d5c8e6eb4877f1ec4c705e2 SHA-256: debd0ff1600105c2a7bb7be178f165f69de25da00ffe65c5377c8d9254200e96
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF was flagged by a machine learning classifier and a critical heuristic for containing a large number of external links. The document body, though heavily obfuscated, contains numerous URLs that appear to be part of a link farm. These links are likely intended to lead users to malicious content or to manipulate search engine results, a common tactic for distributing malware or conducting phishing operations.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9912

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://unieoooq.linkpc
    • http://unieoooq.linkpc.net/54e14e54e54e14e5/The-War-on-Freedom-How-and-Why-America-Was-Attacked-September-11-2001-by-Nafeez-Mosaddeq-Ahmed.pdf
    • http://unieoooq.linkpc.net/94e94e14e14e14e7/The-Attacks-of-September-11th-2001-I-Survived-6-by-Lauren-Tarshis.pdf
    • http://unieoooq.linkpc.net/14e14e24e14e54e14e0/Preiswettbewerb-in-Krisen-Auswirkungen-Der-Terror-Attentate-Des-11-September-2001-Auf-Die-Luftfahrtbranche-by-Ronny-F-rst.pdf
    • http://unieoooq.linkpc.net/34e24e94e64e2/Journey-into-America-by-Akbar-Ahmed.pdf
    • http://unieoooq.linkpc.net/34e04e44e24e34e2/The-Wrong-Enemy-America-in-Afghanistan-2001-2014-by-Carlotta-Gall.pdf
    • http://unieoooq.linkpc.net/44e94e84e84e44e9/A-Quiet-Revolution-The-Veil-s-Resurgence-from-the-Middle-East-to-America-by-Leila-Ahmed.pdf
    • http://unieoooq.linkpc.net/14e04e84e34e34e64e0/The-Greatest-Salesman-in-the-World-2001-2001-Gift-Edition-by-Og-Mandino.pdf
    • http://unieoooq.linkpc.net/14e14e04e94e44e24e2/America-s-Real-First-Thanksgiving-St-Augustine-Florida-September-8-1565-by-Robyn-Gioia.pdf
    • http://unieoooq.linkpc.net/74e24e34e04e54e2/Thomas-Jefferson-The-Freedom-of-America-by-Rebecca-Bjornstad.pdf
    • http://unieoooq.linkpc.net/44e14e54e34e34e4/A-Dream-Deferred-The-Second-Betrayal-of-Black-Freedom-in-America-by-Shelby-Steele.pdf
    • http://unieoooq.linkpc.net/14e94e34e04e34e5/It-Never-Snows-in-September-The-German-View-of-Market-Garden-and-the-Battle-of-Arnhem-September-1944-by-Robert-Kershaw.pdf
    • http://unieoooq.linkpc.net/74e84e14e14e3/Urdu-Novel-Mohabbat-Subha-Ka-Sitara-Hai-by-Umera-Ahmed-by-Umera-Ahmed.pdf
    • http://unieoooq.linkpc.net/34e14e34e84e64e1/In-the-Shadow-of-Freedom-A-Heroic-Journey-to-Liberation-Manhood-and-America-by-Tchicaya-Missamou.pdf
    • http://unieoooq.linkpc.net/84e74e84e54e34e3/TIER-Unit-3-1-Day-One-Attacked-by-Lincoln-James.pdf
    • http://unieoooq.linkpc.net/44e94e84e14e74e4/Articles-on-Pakistani-Novelists-Including-Altaf-Fatima-Bapsi-Sidhwa-Kamila-Shamsie-Zulfikar-Ghose-Anis-Nagi-Ahmad-Nadeem-Qasimi-Ashfaq-Ahmed-Mustansar-Hussain-Tarar-Ibn-E-Safi-Waheed-Ahmed-Mumtaz-Mufti-by-Hephaestus-Books.pdf
    • http://unieoooq.linkpc.net/84e24e54e74e7/2001-Nights-The-Death-Trilogy-Overture-2001-Nights-Trilogy-1-by-Yukinobu-Hoshino.pdf
    • http://unieoooq.linkpc.net/74e14e64e64e24e7/Intelligent-Information-Systems-2001-Proceedings-of-the-International-Symposium-Intelligent-Information-Systems-X-June-18-22-2001-Zakopane-Poland-by-M-A-Kopotek.pdf
    • http://unieoooq.linkpc.net/14e64e74e34e54e0/Freedom-Summer-The-Savage-Season-of-1964-That-Made-Mississippi-Burn-and-Made-America-a-Democracy-by-Bruce-Watson.pdf
    • http://unieoooq.linkpc.net/54e04e94e94e44e1/A-Little-Taste-of-Freedom-The-Black-Freedom-Struggle-in-Claiborne-County-Mississippi-by-Emilye-Crosby.pdf
    • http://unieoooq.linkpc.net/14e44e24e04e94e3/I-ve-Got-the-Light-of-Freedom-The-Organizing-Tradition-and-the-Mississippi-Freedom-Struggle-With-a-New-Preface-by-Charles-M-Payne.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.