Malicious PDF — malware analysis report

Static analysis result for SHA-256 e7221fa581e7d20e…

MALICIOUS

PDF

26.8 KB Created: 2019-05-02 05:59:11 +01:00 Authoring application: mPDF 5.7
MD5: ebb27225eff1e98449f1c936e05ce151 SHA-1: 5d05695678f9c52d3181aa99517b9dfda040cc76 SHA-256: e7221fa581e7d20e8c8204c87928000702d960968beec38e379c3ad3b6fbf6a2
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links pointing to external PDF files, a technique often used for SEO poisoning or to distribute malicious content. The primary heuristic indicates a 'PDF_SEO_LINK_FARM' with 31 external links, and the ML classifier also flagged it as malicious. The embedded URLs are all hosted on the suspicious domain 'cefasfese.4pu.com', suggesting a coordinated effort to direct users to potentially harmful content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9695

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/3730736734733737/Gold-in-the-Water-The-True-Story-of-Ordinary-Men-and-Their-Extraordinary-Dream-of-Olympic-Glory-by-P-H-Mullen-Jr-.pdf
    • http://cefasfese.4pu.com/2735732731732735/Edge-of-Glory-The-Inside-Story-of-the-Quest-for-Figure-Skating-s-Olympic-Gold-Medals-by-Christine-Brennan.pdf
    • http://cefasfese.4pu.com/1732737739736734/I-Know-Why-We-re-Here-The-True-Story-of-an-Ordinary-Woman-s-Extraordinary-Gift-by-Mia-Dolan.pdf
    • http://cefasfese.4pu.com/4731733737739731/The-American-Dream-Revisited-Ordinary-People-Extraordinary-Results-by-Gary-Sirak.pdf
    • http://cefasfese.4pu.com/2730736731736730/Just-Don-t-Fall-A-Hilariously-True-Story-of-Childhood-Cancer-Amputation-Romantic-Yearning-Truth-and-Olympic-Greatness-by-Josh-Sundquist.pdf
    • http://cefasfese.4pu.com/1736734737739732/The-Red-Bicycle-The-Extraordinary-Story-of-One-Ordinary-Bicycle-by-Jude-Isabella.pdf
    • http://cefasfese.4pu.com/4734736733733731/The-Arcanum-The-Extraordinary-True-Story-by-Janet-Gleeson.pdf
    • http://cefasfese.4pu.com/2736739733739737/438-Days-An-Extraordinary-True-Story-of-Survival-at-Sea-by-Jonathan-Franklin.pdf
    • http://cefasfese.4pu.com/2734730734737738/Unbroken-An-Extraordinary-True-Story-of-Courage-and-Survival-by-Laura-Hillenbrand.pdf
    • http://cefasfese.4pu.com/7737734733737739/Mornings-with-Barney-The-True-Story-of-an-Extraordinary-Beagle-by-Dick-Wolfsie.pdf
    • http://cefasfese.4pu.com/2734739737731739/They-Called-Her-Reckless-A-True-Story-of-War-Love-And-One-Extraordinary-Horse-by-Janet-Barrett.pdf
    • http://cefasfese.4pu.com/3730736734733739/Mark-Spitz-The-Extraordinary-Life-of-an-Olympic-Champion-by-Richard-J-Foster.pdf
    • http://cefasfese.4pu.com/1735735732738731/Carnegie-Hall-The-story-of-a-dream-come-true-by-D-Bagnato.pdf
    • http://cefasfese.4pu.com/2735730739734739/For-the-Glory-Eric-Liddell-s-Journey-from-Olympic-Champion-to-Modern-Martyr-by-Duncan-Hamilton.pdf
    • http://cefasfese.4pu.com/6731737732737/Taming-the-Tiger-from-the-Depths-of-Hell-to-the-Heights-of-Glory-The-Remarkable-True-Story-of-a-Kung-Fu-World-Champion-by-Tony-Anthony.pdf
    • http://cefasfese.4pu.com/1739731737736735/The-Floating-Brothel-The-Extraordinary-True-Story-of-an-Eighteenth-Century-Ship-and-Its-Cargo-of-Female-Convicts-by-Si-n-Rees.pdf
    • http://cefasfese.4pu.com/9731736731735731/Mountain-Water-amp-River-Gold-Stories-Of-Gold-Mining-In-The-Alexandra-District-by-John-McCraw.pdf
    • http://cefasfese.4pu.com/2735730739733735/Olympic-Dream-by-Henry-Rono.pdf
    • http://cefasfese.4pu.com/6731735731738/The-Lost-German-Slave-Girl-The-Extraordinary-True-Story-of-Sally-Miller-and-Her-Fight-for-Freedom-in-Old-New-Orleans-by-John-Bailey.pdf
    • http://cefasfese.4pu.com/1730735731738738/As-Far-as-My-Feet-Will-Carry-Me-The-Extraordinary-True-Story-of-One-Man-s-Escape-from-a-Siberian-Labour-Camp-and-His-3-Year-Trek-to-Freedom-by-Josef-M-Bauer.pdf
    • http://cefasfese.4pu.com/2730736731736730/Just-Don-t-Fall-A-Hilariously-True-Story-of-Childh

Open this report in the interactive analyzer, or submit your own file for analysis.