Malicious PDF — malware analysis report

Static analysis result for SHA-256 e20e4ad46826a190…

MALICIOUS

PDF

14.4 KB Created: 2019-11-07 21:52:36 +00:00 Authoring application: mPDF 5.7
MD5: 375c47eafc6ee0fd2f29a06e874ef8b6 SHA-1: 907d39670b27ced7619c2b8d3e06d086a0235ea5 SHA-256: e20e4ad46826a1907b41b08419407c8e570c40a166abee2e9d9bbdb854aecd6e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links to external PDF documents, a technique often used for SEO poisoning or to distribute further malicious content. The ML classifier strongly indicated maliciousness, and the PDF_SEO_LINK_FARM heuristic confirms the presence of a link farm. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9798

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/3734737736733734/Chasing-Trouble-Texas-Trouble-7-by-Becky-McGraw.pdf
    • http://cefasfese.4pu.com/3734737734738732/The-Trouble-With-Love-Texas-Trouble-2-by-Becky-McGraw.pdf
    • http://cefasfese.4pu.com/2732730735735731/Trouble-With-the-Law-Texas-Trouble-11-by-Becky-McGraw.pdf
    • http://cefasfese.4pu.com/4731733731733736/Trouble-in-Paradise-Trouble-Katie-amp-Tyler-s-Story-2-by-Emme-Rollins.pdf
    • http://cefasfese.4pu.com/2737738732731735/Chasing-Trouble-City-Shifters-the-Pride-2-by-Layla-Nash.pdf
    • http://cefasfese.4pu.com/2730739736737736/Making-Trouble-Trouble-Rob-amp-Sabrina-s-Story-3-by-Emme-Rollins.pdf
    • http://cefasfese.4pu.com/1735732737731735/Stuck-Together-Trouble-in-Texas-3-by-Mary-Connealy.pdf
    • http://cefasfese.4pu.com/1735732737733734/Fired-Up-Trouble-in-Texas-2-by-Mary-Connealy.pdf
    • http://cefasfese.4pu.com/2737730737736736/Swept-Away-Trouble-in-Texas-1-by-Mary-Connealy.pdf
    • http://cefasfese.4pu.com/1731733736736736738/Heap-of-Trouble-Trouble-Tennessee-2-by-Natalie-Acres.pdf
    • http://cefasfese.4pu.com/1734737737/Trouble-Is-a-Friend-of-Mine-Trouble-1-by-Stephanie-Tromly.pdf
    • http://cefasfese.4pu.com/2730739736737738/Following-Trouble-Trouble-Rob-amp-Sabrina-s-Story-2-by-Emme-Rollins.pdf
    • http://cefasfese.4pu.com/4736738731732738/Trouble-s-Brewing-Stirring-Up-Trouble-2-by-Juli-Alexander.pdf
    • http://cefasfese.4pu.com/1737731733735737/Along-Came-Trouble-Trouble-3-by-Erin-Kern.pdf
    • http://cefasfese.4pu.com/4735733735737735/Looking-for-Trouble-Trouble-1-by-Erin-Kern.pdf
    • http://cefasfese.4pu.com/3734738735734737/Along-Came-Trouble-Trouble-3-by-Erin-Kern.pdf
    • http://cefasfese.4pu.com/2731737732733736/Santa-Wore-Spurs-by-Becky-McGraw.pdf
    • http://cefasfese.4pu.com/1730735733737734739/Till-Death-Deep-Six-Security-1-by-Becky-McGraw.pdf
    • http://cefasfese.4pu.com/2735738733739731/Till-Death-Deep-Six-Security-1-by-Becky-McGraw.pdf
    • http://cefasfese.4pu.com/2731736739735738/SEALed-Fate-Hot-SEALs-Deep-Six-Security-0-5-by-Becky-McGraw.pdf
    • http://cefasfese.4pu.com/2730739736737738/Following-Trouble-Trouble-Rob-amp-Sabrina-s-Story-2-by-Emme-Rolli

Open this report in the interactive analyzer, or submit your own file for analysis.