Malicious PDF — malware analysis report

Static analysis result for SHA-256 df8b66972672c063…

MALICIOUS

PDF

26.2 KB Created: 2019-04-30 01:43:25 +01:00 Authoring application: mPDF 5.7
MD5: 4285569da76942d787b29e4a7937657a SHA-1: 3f0795734f87a83e04a86eb6a793abc28f305df1 SHA-256: df8b66972672c06319eb47d91a0d18b7b22783074033446d0a209ab9ecbba26b
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded links, as indicated by the PDF_SEO_LINK_FARM heuristic. While the specific URLs extracted are currently marked as benign, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO spam or to redirect users to malicious content. The ML classifier also strongly indicated maliciousness. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9742

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://seasasac.lflinkup.com/7da4da6da6da2da2/Sweet-Romance-Fairfield-Amish-Romance-Book-7-by-Isabell-Weaver.pdf
    • http://seasasac.lflinkup.com/7da4da6da5da4da4/Redeemed-Fairfield-Amish-Romance-Book-5-by-Isabell-Weaver.pdf
    • http://seasasac.lflinkup.com/7da4da6da5da7da9/Fairfield-Amish-Romance-Katie-s-First-Social-Fairfield-Amish-Romance-Short-Story-Book-0-by-Elanor-Miller.pdf
    • http://seasasac.lflinkup.com/7da4da6da5da4da7/New-Beginnings-Fairfield-Amish-Romance-Book-3-by-Diane-Burkholder.pdf
    • http://seasasac.lflinkup.com/7da4da6da5da6da9/Fairfield-Amish-Romance-Boxed-Set-Volume-2-by-Elanor-Miller.pdf
    • http://seasasac.lflinkup.com/4da4da0da4da6da6/The-Paramedic-s-Second-Chance-Sweet-Contemporary-Beach-Romance-Hawthorne-Harbor-Second-Chance-Romance-Book-1-by-Elana-Johnson.pdf
    • http://seasasac.lflinkup.com/4da5da6da8da7da1/ROMANCE-CONTEMPORARY-ROMANCE-Bounty-and-the-Beast-Billionaire-Bad-Boy-Heroine-Mystery-Romance-Contemporary-Mystery-and-Suspense-Mafia-Romance-Book-2-by-Portia-Paige.pdf
    • http://seasasac.lflinkup.com/8da5da4da3da4da3/MENAGE-ROMANCE-BOX-SET-Love-Triangle-7-Enthralling-MMF-Romance-Short-Stories-MMF-Romance-MMF-Menage-Romance-Menage-Romance-by-Marilou-Knox.pdf
    • http://seasasac.lflinkup.com/9da5da6da7da3da9/Amish-Brotherly-Love-Corbins-Creek-Amish-Romance-Series-by-Martha-Sowell.pdf
    • http://seasasac.lflinkup.com/4da4da0da8da2da7/An-Act-of-Love-a-Sweet-Romance-Novel-Seaside-Bay-Book-1-by-Dee-J-Stone.pdf
    • http://seasasac.lflinkup.com/8da5da4da3da3da6/MMF-Attracted-by-Bad-Boys-Romance-Bad-Boy-Military-Menage-Romance-New-Adult-Romance-by-Marilou-Knox.pdf
    • http://seasasac.lflinkup.com/1da1da2da8da5da8da4/Torn-4-A-Bad-Boy-Romance-Book-4-A-Contemporary-Romance-Novel-by-Liz-Levoy.pdf
    • http://seasasac.lflinkup.com/4da4da0da8da2da4/Miss-Devon-s-Choice-A-Sweet-Regency-Romance-Branches-of-Love-Book-5-by-Sally-Britton.pdf
    • http://seasasac.lflinkup.com/1da0da8da4da0da9da1/The-Sheikh-s-Secret-Mistress-Billionaire-Affair-Sheilkh-Romance-by-Yarah-Isabell.pdf
    • http://seasasac.lflinkup.com/3da5da1da6da2da0/Special-Delivery-Valentine-An-Office-Romance-Short-Story-Lesbian-Office-Romance-Series-Book-2-by-Roz-Lee.pdf
    • http://seasasac.lflinkup.com/8da8da0da2da5da1/Second-Chances-101-Ripple-Effect-Romance-5-by-Donna-K-Weaver.pdf
    • http://seasasac.lflinkup.com/1da8da2da4da1da2/A-Way-Home-Gay-Amish-Romance-3-by-Keira-Andrews.pdf
    • http://seasasac.lflinkup.com/4da8da4da2da3da0/ROMANCE-SHIFTER-ROMANCE-Knocked-Up-By-The-Navy-Shifter-Navy-Seal-Pregnancy-Alpha-Male-Romance-Paranormal-Fantasy-Protector-Short-Stories-by-Silvia-Pierce.pdf
    • http://seasasac.lflinkup.com/8da9da2da8da8da8/Ephraim-s-Chance-Amish-Romance-Secrets-4-by-Samantha-Price.pdf
    • http://seasasac.lflinkup.com/4da7da4da7da1da5/Love-One-Summer-in-Bath-A-Regency-Romance-Summer-Collection-8-Delightful-Regency-Summer-Stories-Regency-Romance-Collections-Book-4-by-Arietta-Richmond.pdf
    • http://seasasac.lflinkup.com/4da4da0da4da6da6/The-Paramedic-s-Second-Chance-Sweet-Contemporary-

Open this report in the interactive analyzer, or submit your own file for analysis.