PDF malware analysis — malicious · e7b215d7b10703f0

MALICIOUS

PDF

49.6 KB Created: 2020-12-21 06:09:29 +02:00 Authoring application: wkhtmltopdf 0.12.5 (via Qt 4.8.7)

MD5: a6322e4fa2399b73e653d907da6a9d14 SHA-1: b03923bbeb8f3f4027e03a2d96baaaffa5e1792d SHA-256: e7b215d7b10703f0f8fb2dd569719d46c983204c4cbc14a903a3a1b3e26b5715

152 Risk Score

Malware Insights

MITRE ATT&CK

T1566.001 Spearphishing Attachment T1059.007 JavaScript

The PDF contains a link to a known malicious redirector, which is designed to trick users into providing credentials. The embedded text and ClamAV detection further support a phishing and trojan classification. No scripts were extracted from this sample, but the presence of a malicious URL is a high-priority indicator.

Machine Learning

Nyx PDF Classifier malicious score 0.7179

Heuristics 3

PDF links to known malicious redirector infrastructure critical PDF_MALICIOUS_REDIRECTOR_LINK

PDF contains a clickable URI to redirector infrastructure used by a known malicious PDF SEO/adware delivery campaign. These documents typically rely on user interaction and redirect chains rather than a PDF parser vulnerability.
ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL https://cctraff.ru/strik?utm_term=onedrive+login+error+0x8004deb0
- https://cdn-cms.f-static.net/uploads/4444092/normal_5fa3c1e90ad6f.pdf
- https://s3.amazonaws.com/kukazowox/world_war_1_test_answers.pdf
- https://static1.squarespace.com/static/5fc583b0affbf90a6609c4d2/t/5fd0ac8912264b5dfdd1a968/1607511177547/runes_warwick_jungle_s8.pdf
- https://s3.amazonaws.com/vukumesoj/ansul_system_service_manual.pdf
- https://s3.amazonaws.com/nazekisigiduz/que_son_los_valores_eticos_universales.pdf
- https://s3.amazonaws.com/zifozujiwi/bomb_squad_apk_mod_revdl.pdf
- https://s3.amazonaws.com/zafirawit/60288341477.pdf
- https://s3.amazonaws.com/regegozumekoza/convert_html_document_to_free_online.pdf
- https://s3.amazonaws.com/takurugilij/pupasexadukuf.pdf
- https://static1.squarespace.com/static/5fc64c582e537a05ef2dcca0/t/5fceb9455664f342cf1f7916/1607383366572/black_labrador_christmas_cards.pdf
- https://s3.amazonaws.com/netinuwa/marathi_kadambari_list.pdf
- https://s3.amazonaws.com/donarepemi/mijuveniwumoposefiwaditi.pdf
- https://s3.amazonaws.com/kovilowab/subinubilajonexunilibaza.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.