Malicious PDF — malware analysis report

Static analysis result for SHA-256 e06f8df7dcff08bd…

MALICIOUS

PDF

40.1 KB Created: 2019-04-30 04:54:37 +01:00 Authoring application: mPDF 5.7
MD5: 5c64168e624f0f5fc8d601c9c2224357 SHA-1: 448750bfc68c2b5557469165e6d0c0146df75123 SHA-256: e06f8df7dcff08bdc20757083593643de3a179d5610a2fa8208d92d4d9ef5e2f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While most of these links were classified as benign, the sheer volume and the ML_NYX_PDF_MALICIOUS classification indicate a malicious intent, likely for SEO manipulation or to distribute further payloads. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9665

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/5a06a08a06a05a02/Habitat-and-the-High-Rise-Tradition-and-Innovation-Proceedings-of-the-Fifth-World-Congress-May-14-19-1995-by-Lynn-S-Beedle.pdf
    • http://muicuiu.dumb1.com/6a05a06a03a06a00/Ellsworth-R-Bathrick-Late-a-Representative-from-Ohio-Memorial-Addresses-Delivered-in-the-House-of-Representatives-of-the-United-States-Sixty-Fifth-Congress-Second-Session-Proceedings-in-the-House-February-10-1918-Proceedings-in-the-Senate-Janua-by-U-S-Congress.pdf
    • http://muicuiu.dumb1.com/5a07a03a08a09a04/Reclaiming-the-Underground-Space-2-Volume-Set-Proceedings-of-the-Ita-World-Tunneling-Congress-Amsterdam-2003-by-Saveur.pdf
    • http://muicuiu.dumb1.com/1a01a04a07a09a06a00/Innovative-Housing-Practices-Better-Housing-Through-Innovative-Technologies-and-Financing-Proceedings-of-the-Iahs-World-Congress-on-Housing-University-of-Porto-Portugal-23-27-October-1989-by-Vitor-Abrantes.pdf
    • http://muicuiu.dumb1.com/7a08a03a06a03a09/Die-Kunstlergilde-1995-Realitat-ALS-Wirklichkeit-1945--26-Marz-23-April-1995-Museum-Ostdeutsche-Galerie-Regensburg-12-Mai-11-Juni-1995-by-Jacek-Barski.pdf
    • http://muicuiu.dumb1.com/5a06a08a06a00a00/Plastic-Design-Of-Steel-Frames-by-Lynn-S-Beedle.pdf
    • http://muicuiu.dumb1.com/5a06a08a06a04a03/Catalyst-For-Skyscraper-Revolution-Lynn-S-Beedle-A-Legend-In-His-Lifetime-by-Mir-M-Ali.pdf
    • http://muicuiu.dumb1.com/7a01a06a06a06a00/Nonlinear-Dynamics-Chaotic-and-Complex-Systems-Proceedings-of-an-International-Conference-Held-in-Zakopane-Poland-November-7-12-1995-Plenary-Invi-by-E-Infeld.pdf
    • http://muicuiu.dumb1.com/1a01a01a04a08a01a06/Unemployment-and-Underemployment-in-Historical-Perspective-Proceedings-of-the-Tenth-International-Economic-History-Congress-Leuven-August-1990-Session-B-9-by-Eric-Aerts.pdf
    • http://muicuiu.dumb1.com/5a01a02a01a09a01/Working-Knowledge-Employee-Innovation-and-the-Rise-of-Corporate-Intellectual-Property-1800-1930-by-Catherine-L-Fisk.pdf
    • http://muicuiu.dumb1.com/1a00a05a04a04a07a04/Summary-of-the-Tax-Reform-Act-of-1976-H-R-10612-94th-Congress-Public-Law-94-455-by-U-S-Congress.pdf
    • http://muicuiu.dumb1.com/5a07a03a00a02a01/Scientists-in-Conference-The-Congress-Organizer-s-Handbook-the-Congress-Visitor-s-Companion-by-Volker-Neuhoff.pdf
    • http://muicuiu.dumb1.com/1a00a05a04a04a00a01/Summary-of-the-Tax-Reform-Act-of-1976-H-R-10612-94th-Congress-Public-Law-94-455-by-U-S-Congress-Joint-Committee-on-Taxation.pdf
    • http://muicuiu.dumb1.com/1a01a01a04a07a02a08/Economic-Effects-Of-The-French-Revolutionary-And-Napoleonic-Wars-Proceedings-Of-The-Tenth-International-Economic-History-Congress-Leuven-August-1990-Studies-In-Social-And-Economic-History-by-Eric-Aerts.pdf
    • http://muicuiu.dumb1.com/7a03a04a04a03a09/Industrial-Innovation-in-Japan-Routledge-Studies-in-Innovation-Organizations-and-Technology-by-Takuji-Hara.pdf
    • http://muicuiu.dumb1.com/8a03a04a04a02a02/Predictive-Geology-with-Emphasis-on-Nuclear-Waste-Disposal-Proceedings-of-Papers-Presented-at-Sessions-Sponsored-by-the-International-Association-for-Mathematical-Geology-at-the-26th-International-Geological-Congress-in-Paris-July-1980-by-Ghislain-de-Marsily.pdf
    • http://muicuiu.dumb1.com/5a01a01a04a07a02/Innovation-How-Innovators-Think-Act-and-Change-Our-World-by-Kim-Chandler-McDonald.pdf
    • http://muicuiu.dumb1.com/3a06a06a02a02/High-Rise-by-J-G-Ballard.pdf
    • http://muicuiu.dumb1.com/7a09a03a06a01a09/Imaging-in-High-Energy-Astronomy-Proceedings-of-the-International-Workshop-Held-in-Anacapri-Capri-Italy-26-30-September-1994-by-L-Bassani.pdf
    • http://muicuiu.dumb1.com/1a06a07a03a00a04/Disrupting-Class-How-Disruptive-Innovation-Will-Change-the-Way-the-World-Learns-by-Clayton-M-Christensen.pdf
    • http://muicuiu.dumb1.com/5a07a03a08a09a04/Reclaiming-the-Underground-Space-2-Volume-Set-Proceedings-of-the-Ita-World-Tunneling-Congress-Am

Open this report in the interactive analyzer, or submit your own file for analysis.