Malicious PDF — malware analysis report

Static analysis result for SHA-256 e2733570093de6e6…

MALICIOUS

PDF

25.7 KB Created: 2019-05-07 05:48:40 +01:00 Authoring application: mPDF 5.7
MD5: 0de2ba501390763552a2bf75723eb717 SHA-1: cdc129e8c6d12ae4daec3b5a93d488fcf802ff88 SHA-256: e2733570093de6e65822b9513540e2fd9daae4035e177ac38731405036353459
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, pointing to various book titles. The ML classifier also strongly indicated maliciousness. The embedded URLs, while marked as benign by reputation services, are part of a link farm designed to drive traffic to potentially malicious content. The document body itself is heavily obfuscated but contains repetitions of these URLs.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/4a07a00a07a05a00/Romantic-Tales-Bedtime-Stories-Episode-1-by-Tigris-Eden.pdf
    • http://muicuiu.dumb1.com/5a09a08a07a08a07/Ten-After-Midnight-A-Collection-of-Ten-Romantic-and-Sexy-Short-Bedtime-Stories-Written-for-Grown-Ups-by-Roberta-Anglaise.pdf
    • http://muicuiu.dumb1.com/3a01a02a02a05a07/Sweet-Bedtime-Tales-10-Minute-Short-Stories-16-Tales-of-Adventure-for-Kids-by-Betty-J-Byers.pdf
    • http://muicuiu.dumb1.com/1a08a08a09a05a08/Bedtime-Stories-A-Collection-of-Erotic-Fairy-Tales-by-Jean-Johnson.pdf
    • http://muicuiu.dumb1.com/2a00a05a00a05a01/The-Empress-s-New-Lingerie-and-Other-Erotic-Fairy-Tales-Bedtime-Stories-for-Grown-Ups-by-Hillary-Rollins.pdf
    • http://muicuiu.dumb1.com/3a01a03a04a00a00/Animals-and-Shapes-Books-2-Great-Short-Bedtime-Stories-Children-s-books--Animal-and-Shapes-Bedtime-Stories-for-Kids-by-Betty-J-Byers.pdf
    • http://muicuiu.dumb1.com/3a01a03a05a04a03/Kids-Short-Story-Collection-2-Great-Short-Bedtime-Stories-Children-s-books--Animal-Bedtime-Stories-for-Kids-by-Betty-J-Byers.pdf
    • http://muicuiu.dumb1.com/3a01a03a06a04a05/Children-s-Bedtime-Story-Collection-4-Books-in-1-Magical-Bedtime-Stories-for-Kids-Collection-4-Books-about-Animals-Shapes-Dreams-Family-by-Betty-J-Byers.pdf
    • http://muicuiu.dumb1.com/9a07a04a07a08a03/The-Missing-Hamster-Mystery-Book-for-Kids-Ages-6-8-9-12-Free-Stories-Bedtime-Stories-Zooey-amp-Caleb-6th-Grade-Detectives-by-R-K-Davenport.pdf
    • http://muicuiu.dumb1.com/2a09a08a04a09a05/Bedtime-Tales-of-Horror-Forever-in-His-Arms-by-Bradley-Poage.pdf
    • http://muicuiu.dumb1.com/3a06a03a08a03a00/Blazing-Bedtime-Stories-by-Kimberly-Raye.pdf
    • http://muicuiu.dumb1.com/7a07a07a05a00a04/Bedtime-Stories-for-Children-You-Hate-by-Antoinette-Bergin.pdf
    • http://muicuiu.dumb1.com/2a04a05a00a04a09/Precious-Moments-Bedtime-Stories-by-Samuel-J-Butcher.pdf
    • http://muicuiu.dumb1.com/7a05a09a09a07a00/Bedtime-History-Inspirational-Stories-for-Kids-by-Breck-LeSueur.pdf
    • http://muicuiu.dumb1.com/2a00a04a01a03a06/Dragons-and-Dreams-Bedtime-Stories-Illustrated-by-Becca-Price.pdf
    • http://muicuiu.dumb1.com/4a04a05a00a07a08/Romantic-Fairy-Tales-by-Carol-Tully.pdf
    • http://muicuiu.dumb1.com/1a08a05a00a09a02/Children-s-book-Monkey-Brains--Kids-Hillarious-Action-amp-Adventure-book-Bedtime-stories-for-children-short-stories-for-kids-Childrens-books-stories-reader-Funny-Action-and-Adventure-story-by-Nelson-Boyce.pdf
    • http://muicuiu.dumb1.com/3a06a03a05a00a05/A-Prince-of-a-Guy-Goldie-and-the-Three-Brothers-Blazing-Bedtime-Stories-5-by-Leslie-Kelly.pdf
    • http://muicuiu.dumb1.com/1a01a05a08a01a00a08/Little-Black-Book-Bedtime-Stories-for-Lovers-Vol-1-by-Nefertari-Imani-Baraka.pdf
    • http://muicuiu.dumb1.com/6a02a00a00a09a08/Woolgathering-Bedtime-Stories-for-Wayward-Grown-Ups-by-Corbyn-Hanson-Hightower.pdf
    • http://muicuiu.dumb1.com/2a00a05a00a05a01/The-Empress-s-New-Lingerie-and-Other-Erotic-Fairy-Tales-Bedtime-Stories-for-Grown-Ups-by-

Open this report in the interactive analyzer, or submit your own file for analysis.