Malicious PDF — malware analysis report

Static analysis result for SHA-256 e641156cdb7fcf2b…

MALICIOUS

PDF

30.0 KB Created: 2019-04-30 01:57:28 +01:00 Authoring application: mPDF 5.7
MD5: ccf684a6085f786e66fb86d183f07a1a SHA-1: 0c8ccc8587270b136697b79b756c1ef23b1bba55 SHA-256: e641156cdb7fcf2bc63f387a47b5bb8dda308a03563a39802b9d5db90647d982
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDF documents, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this PDF as malicious. The primary attack pattern appears to be a link farm designed to redirect users to numerous other documents, likely for SEO manipulation or to host malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9684

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a01a00a00a03a05a03/Mailand-Bauwerk-in-Mailand-Bildung-Und-Forschung-in-Mailand-Geschichte-Mailands-Person-Mailand-Sport-Mailand-Unternehmen-by-Quelle-Wikipedia.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a04a02a09/Bauwerk-in-Mailand-Teatro-Alla-Scala-Mailander-Dom-Sant-ambrogio-Flughafen-Mailand-Linate-Metropolitana-Di-Milano-by-Quelle-Wikipedia.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a04a02a08/Sportveranstaltung-in-Der-Lombardei-Grosser-Preis-Von-Italien-Sportveranstaltung-in-Mailand-Sportveranstaltung-in-Monza-Mailand-Sanremo-by-Quelle-Wikipedia.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a06a04a07/Mailand-Reisef-hrer-Zeit-f-r-das-Beste-Highlights---Geheimtipps---Wohlf-hladressen-von-der-Mail-nder-Scala-bis-zu-feinsten-Restaurants-in-einem-praktischen-Mailand-City-Guide-by-Bettina-D-rr.pdf
    • http://muicuiu.dumb1.com/1a00a01a02a06a02a06/Die-P-pstin-von-Mailand-Die-Geschichte-der-Vilemiten-by-Christine-Neumeyer.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a04a01a08/Ein-Sommer-in-Mailand-by-Christa-Reusch.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a03a06a06/Polyglott-On-Tour-Mailand-by-Christine-Hamel.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a04a02a01/Mailand-zwischen-den-Zeilen-by-Monika-H-ge.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a03a05a08/Die-M-tresse-von-Mailand-Historischer-Roman-by-Frank-Fabian.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a04a05a09/Reise-Know-How-CityTrip-Mailand-und-Bergamo-by-Jens-Sobisch.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a04a06a06/Rosen-Rendezvous-in-Mailand---Un-Amore-Italiano-by-Liza-Moriani.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a06a04a02/Renaissance-Von-Mailand-Bis-Neapel-Die-Kunst-An-Den-H-fen-Italiens-by-Alison-Cole.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a04a03a02/Einzelhandelslandschaften-in-Zeiten-Der-Internationalisierung-Birmingham-Mailand-Munchen-by-Frank-Schr-der.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a06a05a00/Bibliotheca-Patrum-Latinorum-Italica-Vol-2-Erstes-Heft-III-Die-Ambrosianische-Bibliothek-in-Mailand-by-August-Reifferscheid.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a06a04a04/Stadtarchitektur-Mailand-1920---1940-Die-Bewegung-Des-Novocento-Milanese-Um-Giovanni-Muzio-Und-Giuseppe-de-Finetti-by-Burg.pdf
    • http://muicuiu.dumb1.com/1a00a02a02a06a00a02/Romische-Mikropolitik-Unter-Papst-Paul-V-Borghese-1605-1621-Zwischen-Spanien-Neapel-Mailand-Und-Genua-by-Julia-Zunckel.pdf
    • http://muicuiu.dumb1.com/6a01a01a07a07a04/Latium-Bauwerk-Im-Latium-Bildung-Und-Forschung-in-Latium-Geographie-Latium-Musik-Im-Latium-Religion-Latium-ROM-Unternehmen-by-Quelle-Wikipedia.pdf
    • http://muicuiu.dumb1.com/9a08a00a06a09a02/Bildung-Und-Forschung-in-Sudholland-Bildung-Und-Forschung-in-Den-Haag-Bildung-Und-Forschung-in-Rotterdam-Hochschullehrer-by-Quelle-Wikipedia.pdf
    • http://muicuiu.dumb1.com/9a08a00a03a06a07/Bildung-in-Thuringen-Bibliothek-in-Thuringen-Bildung-Und-Forschung-in-Erfurt-Bildung-Und-Forschung-in-Gera-Bildung-Und-Forschung-in-Ilmenau-by-Quelle-Wikipedia.pdf
    • http://muicuiu.dumb1.com/9a08a00a06a09a09/Bildung-in-Rheinland-Pfalz-Bildung-Und-Forschung-in-Koblenz-Bildung-Und-Forschung-in-Landau-in-Der-Pfalz-by-Quelle-Wikipedia.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a04a02a08/Sportveranstaltung-in-Der-Lombardei-Grosser-Preis-Von-Italien-Sportveranstaltung-in-Mailand-Spo

Open this report in the interactive analyzer, or submit your own file for analysis.