Malicious PDF — malware analysis report

Static analysis result for SHA-256 df02456134d3ba10…

MALICIOUS

PDF

15.7 KB Created: 2019-05-02 00:59:27 +01:00 Authoring application: mPDF 5.7
MD5: 29ea847d379b6bde7ab7643d399cb97d SHA-1: ed9fecf25aa786a2a52164c3f340800eb69bc16d SHA-256: df02456134d3ba10e0099f6bebdecb9671a030e8731b142772f1def859d5f538
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links pointing to external PDFs on the domain 'muicuiu.dumb1.com'. This pattern is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier also flagged this PDF as malicious with a high probability. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9778

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/3a05a04a01a00a02/Before-She-Met-Me-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/1a04a03a04a06a03/Nothing-To-Be-Frightened-Of-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/8a02a01a06a07a03/Hygiene-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/4a07a00a06a02a02/Talking-It-Over-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/7a09a05a06a08a00/O-Sentido-do-Fim-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/1a03a09a08a09a05/Talking-It-Over-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/4a04a02a00a07a05/The-Sense-of-an-Ending-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/3a04a09a08a05a03/Cross-Channel-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/3a03a02a01a03a08/Letters-from-London-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/2a09a00a05a06a03/A-History-of-the-World-in-10-Chapters-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/1a09a05a07a09a00/Through-the-Window-Seventeen-Essays-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/5a08a00a02a09a08/Flaubert-s-parrot-and-A-history-of-the-world-in-10-1-2-chapters-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/1a01a02a04a08a06a09/Through-the-Window-Seventeen-Essays-and-a-Short-Story-by-Julian-Barnes.pdf
    • http://muicuiu.dumb1.com/1a00a05a05a09a06a04/Supercharge-Your-Mind-Body-and-Life-48-Tips-to-Boost-Your-Energy-Levels-by-Guy-Ruge.pdf
    • http://muicuiu.dumb1.com/2a05a02a05a04a06/The-Secret-Life-of-Lady-Lucinda-Summersby-3-by-Sophie-Barnes.pdf
    • http://muicuiu.dumb1.com/4a02a05a04a05a03/Semi-Invisible-Man-The-Life-of-Norman-Lewis-by-Julian-Evans.pdf
    • http://muicuiu.dumb1.com/5a01a08a06a01a03/Standing-on-a-Volcano-The-Life-and-Times-of-David-Rowland-Francis-by-Harper-Barnes.pdf
    • http://muicuiu.dumb1.com/2a08a03a02a03/Ah-Julian-A-Memoir-of-Julian-Brodetsky-by-Leonard-Wibberley.pdf
    • http://muicuiu.dumb1.com/4a09a07a07a04/The-Happy-Bottom-Riding-Club-The-Life-and-Times-of-Pancho-Barnes-by-Lauren-Kessler.pdf
    • http://muicuiu.dumb1.com/8a00a06a05a02a01/Julian-amp-Lia-The-Julian-Series-1-by-Maria-Monroe.pdf
    • http://muicuiu.dumb1.com/5a08a00a02a09a08/Fl

Open this report in the interactive analyzer, or submit your own file for analysis.