Malicious PDF — malware analysis report

Static analysis result for SHA-256 e10836abb502d8b6…

MALICIOUS

PDF

16.7 KB Created: 2019-04-30 05:18:32 +01:00 Authoring application: mPDF 5.7
MD5: cc21e696f63598db26b4f82ea0bae6f1 SHA-1: aaff7b067ae976690ad8369768b76686d9feede6 SHA-256: e10836abb502d8b616def193dd3a3021ba8edafb49a9af44dc8262677b533677
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded links to external PDF files, hosted on the domain 'muicuiu.dumb1.com'. This behavior is indicative of a link farm or a phishing lure designed to direct users to potentially malicious content. The ML classifier also flagged this PDF as malicious with a high probability. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9788

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a06a06a08a00a08/Welcome-to-Romero-Park-Night-of-the-Victorian-Dead-1-by-Amber-Michelle-Cook.pdf
    • http://muicuiu.dumb1.com/3a06a00a05a02a07/Welcome-to-Romero-Park-Night-of-the-Victorian-Dead-1-by-Amber-Michelle-Cook.pdf
    • http://muicuiu.dumb1.com/4a08a09a07a07a00/Dawn-of-the-Dead-by-George-A-Romero.pdf
    • http://muicuiu.dumb1.com/3a07a01a01a00a01/Animal-Parts-A-Peter-Romero-Mystery-Peter-Romero-Mysteries-Book-3-by-David-Knop.pdf
    • http://muicuiu.dumb1.com/9a01a03a03a06/Surrender-to-the-Will-of-the-Night-Instrumentalities-of-the-Night-3-by-Glen-Cook.pdf
    • http://muicuiu.dumb1.com/6a01a07a04a03/Dead-of-Night-Dead-of-Night-1-by-Jonathan-Maberry.pdf
    • http://muicuiu.dumb1.com/2a08a02a09a06a09/The-Witches-of-Echo-Park-The-Witches-of-Echo-Park-1-by-Amber-Benson.pdf
    • http://muicuiu.dumb1.com/3a05a01a03a09a06/Pembroke-Park-by-Michelle-Martin.pdf
    • http://muicuiu.dumb1.com/8a00a05a06a06a00/The-Victorian-Book-of-the-Dead-by-Chris-Woodyard.pdf
    • http://muicuiu.dumb1.com/2a02a07a04a04a07/Warrior-Within-Surviving-the-Dead-3-by-James-N-Cook.pdf
    • http://muicuiu.dumb1.com/1a01a06a02a09a06a00/Jurassic-Park-Michael-Crichton-List-of-Jurassic-Park-Characters-the-Lost-World-Jurassic-Park-Jurassic-Park-III-Biological-Issue-by-Source-Wikipedia.pdf
    • http://muicuiu.dumb1.com/2a02a07a04a04a06/Fire-in-Winter-Surviving-the-Dead-4-by-James-N-Cook.pdf
    • http://muicuiu.dumb1.com/2a06a08a08a06a09/Leftover-Dead-Trailer-Park-Mystery-5-by-Jimmie-Ruth-Evans.pdf
    • http://muicuiu.dumb1.com/2a00a06a09a07a00/Up-a-Tree-in-the-Park-at-Night-with-a-Hedgehog-by-P-Robert-Smith.pdf
    • http://muicuiu.dumb1.com/3a00a07a04a04a07/Dead-Dreams-by-Michelle-Wright.pdf
    • http://muicuiu.dumb1.com/2a05a00a00a01a00/Playlist-for-the-Dead-by-Michelle-Falkoff.pdf
    • http://muicuiu.dumb1.com/4a04a04a08/Dead-Girls-Society-by-Michelle-Krys.pdf
    • http://muicuiu.dumb1.com/1a07a09a09a04a05/Touch-The-Queen-of-the-Dead-2-by-Michelle-Sagara.pdf
    • http://muicuiu.dumb1.com/9a00a04a03a07/Silence-The-Queen-of-the-Dead-1-by-Michelle-Sagara.pdf
    • http://muicuiu.dumb1.com/5a00a04a08a08a09/How-to-Be-a-Victorian-A-Dawn-to-Dusk-Guide-to-Victorian-Life-by-Ruth-Goodman.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.