Malicious PDF — malware analysis report

Static analysis result for SHA-256 e175285408d9c319…

MALICIOUS

PDF

19.1 KB Created: 2019-04-29 23:16:21 +01:00 Authoring application: mPDF 5.7
MD5: a6181873f1dd0409923fc8be44089f8d SHA-1: 8b6c7c6066b9ab06c3d8b7e1a60e78b29e8d4182 SHA-256: e175285408d9c319f2335eaf962469e4660b16e3a75ab4341a7204e4592aa01b
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. While most of these URLs were flagged as benign, the sheer volume and the ML_NYX_PDF_MALICIOUS classification indicate a malicious intent. The embedded URLs likely serve as a link farm for SEO manipulation or as a distribution mechanism for further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9940

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://unieoooq.linkpc.net/14e04e54e74e04e24e7/Lonliness-Of-The-Hedgehog-by-Ruben-Garcia-Cebollero.pdf
    • http://unieoooq.linkpc.net/74e24e64e54e94e0/Nadie-gana-una-guerra-by-Ruben-Garcia-Cebollero.pdf
    • http://unieoooq.linkpc.net/94e94e04e84e54e5/Der-perfekte-Look-Umwerfend-aussehen---bei-jeder-Gelegenheit---Illustrationen-von-Ruben-Toledo-by-Nina-Garc-a.pdf
    • http://unieoooq.linkpc.net/84e54e14e44e74e7/Sonic-The-Hedgehog-Archives-Volume-7-Sonic-the-Hedgehog-Archives-7-by-Michael-Gallagher.pdf
    • http://unieoooq.linkpc.net/84e54e14e34e24e0/Sonic-the-Hedgehog-Archives-Volume-1-Sonic-the-Hedgehog-Archives-1-by-Michael-Gallagher.pdf
    • http://unieoooq.linkpc.net/44e84e04e54e44e8/Sonic-The-Hedgehog-Archives-Volume-8-Sonic-the-Hedgehog-Archives-8-by-Angelo-DeCesare.pdf
    • http://unieoooq.linkpc.net/84e54e14e44e84e4/Sonic-the-Hedgehog-Archives-Volume-4-Sonic-the-Hedgehog-Archives-4-by-Michael-Gallagher.pdf
    • http://unieoooq.linkpc.net/14e04e54e64e74e24e4/The-Path-of-Lonliness-by-Elisabeth-Elliott.pdf
    • http://unieoooq.linkpc.net/14e04e54e74e04e24e4/Lonliness-Is-For-Loving-by-Robert-E-Lauder.pdf
    • http://unieoooq.linkpc.net/44e44e34e54e74e6/Marine-Public-Servant-Kansan-The-Life-of-Ernest-Garcia-by-Dennis-Garcia.pdf
    • http://unieoooq.linkpc.net/14e04e44e84e14e24e5/Eine-Nachricht-f-r-Garcia-A-Message-to-Garcia-by-Elbert-Hubbard.pdf
    • http://unieoooq.linkpc.net/84e14e04e54e8/The-Elegance-of-the-Hedgehog-by-Muriel-Barbery.pdf
    • http://unieoooq.linkpc.net/84e04e64e24e74e7/The-Happy-Hedgehog-by-Marcus-Pfister.pdf
    • http://unieoooq.linkpc.net/14e14e54e64e34e44e8/Lulu-and-the-Hedgehog-in-the-Rain-by-Hilary-McKay.pdf
    • http://unieoooq.linkpc.net/14e74e54e54e74e6/I-Was-A-Bitch-by-Emily-Ruben.pdf
    • http://unieoooq.linkpc.net/24e04e64e94e74e0/Up-a-Tree-in-the-Park-at-Night-with-a-Hedgehog-by-P-Robert-Smith.pdf
    • http://unieoooq.linkpc.net/14e14e64e64e74e04e3/The-Ritual-Martin-Ruben-1-by-J-N-Williamson.pdf
    • http://unieoooq.linkpc.net/14e24e14e94e64e1/Redemption-Vincent-and-Eve-3-by-Jessica-Ruben.pdf
    • http://unieoooq.linkpc.net/84e84e14e84e74e9/The-Trail-We-Leave-by-Ruben-Palma.pdf
    • http://unieoooq.linkpc.net/64e34e74e04e64e2/Bookclub-in-a-Box-Discusses-Muriel-Barbery-s-novel-The-Elegance-of-the-Hedgehog-by-Marilyn-Herbert.pdf
    • http://unieoooq.linkpc.net/44e

Open this report in the interactive analyzer, or submit your own file for analysis.