Malicious PDF — malware analysis report

Static analysis result for SHA-256 ea2f99d4a053bfcc…

MALICIOUS

PDF

30.7 KB Created: 2019-11-09 23:37:24 +00:00 Authoring application: mPDF 5.7
MD5: 11434c242357929be63462e4f5eb4d9a SHA-1: c464b48d4191c92f54e2aabc2f82a4f5f4b5b191 SHA-256: ea2f99d4a053bfcc50003758953c1298be2c685929a264bde548c62ab5f129e0
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO poisoning or to distribute malicious content. The ML classifier also flagged this PDF as malicious. The primary attack pattern involves directing users to a suspicious domain hosting numerous PDF documents, likely as a lure or to distribute further malware.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9684

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/9736733734730732/Mit-Humor-durch-die-Lesestunde-Wo-verstecken-sich-der-Witz-und-die-Ironie-in-einer-Schulbibliothek-by-Waltraud-Calvi-Hatz.pdf
    • http://cefasfese.4pu.com/8737737730737734/Lachende-Propheten-Witz-und-Humor-in-den-Religionen-by-Harald-Alexander-Korp.pdf
    • http://cefasfese.4pu.com/9738732736738731/Der-Weise-Alte-Fuchs-Sikati-Und-Der-Undankbare-Dicke-Hase-Hansi-Schwarz-Weiss-Ausgabe-Warum-Fuchse-Hasen-Jagen-Und-Sich-Hasen-in-Erdlochern-Verstecken-by-Dantse-Dantse.pdf
    • http://cefasfese.4pu.com/9737731733730738/Man-schnurrt-sich-so-durch-by-Maximiliane-G-Berse.pdf
    • http://cefasfese.4pu.com/9736738738737738/Ein-Texaner-schl-gt-sich-durch-by-Ross-Kinkaid.pdf
    • http://cefasfese.4pu.com/9737737738738733/MITFAHRER---Einer-f-hrt-durch-s-Kuckucksnest-Teil-II-by-Wolfgang-Ziemer.pdf
    • http://cefasfese.4pu.com/1731734732737739736/Vorbeugung-Einer-M-glichen-Globalen-Katastrophe-Durch-Die-Technologie-Der-Umwandlung-Des-Visuellen-Signals-Steuernder-Zugang-in-Einen-Beliebigen-Punkt-Der-Raumzeit-by-Grabovoi-Grigori.pdf
    • http://cefasfese.4pu.com/9738738730738732/Johann-Carvers-Reisen-durch-die-innern-Gegenden-von-Nord-Amerika-in-den-Jahren-1766-1767-und-1768-microform-mit-einer-Landkarte-aus-dem-Englischen-by-Jonathan-Carver.pdf
    • http://cefasfese.4pu.com/9738733739730739/Lexicon-Derer-Jetztlebenden-Rechtsgelehrten-in-Und-Um-Teutschland-Welche-Die-Rechte-Offentlich-Lehren-Oder-Sich-Sonsten-Durch-Schrifften-Bekannt-Gemacht-Haben-So-Viel-Ihrer-Dermalen-Zu-Erkundigen-Gewesen-Seynd-by-Johann-Jakob-Moser.pdf
    • http://cefasfese.4pu.com/9736733737738730/Kindle-Unlimited---Lohnt-sich-das-Wie-Sie-als-Leser-oder-Autor-das-Beste-f-r-sich-rausholen-by-Markus-Tillmanns.pdf
    • http://cefasfese.4pu.com/9739735734736738/Uber-Die-Astigmatische-Abbildung-Einer-Unbegrenzten-Ebene-in-Einer-Kugel-Bezuglich-Eines-Festen-Augenpunktes-Inaugural-Dissertation-Zur-Erlangung-Der-Doktorwurde-Einer-Hohen-Philosophischen-Fakultat-Der-Universitat-Rostock-by-Johannes-Bieneck.pdf
    • http://cefasfese.4pu.com/9738739731730730/Port-Cities-as-Areas-of-Transition-Ethnographic-Perspectives-by-Waltraud-Kokot.pdf
    • http://cefasfese.4pu.com/9736733733732730/Die-Hatz-by-Elin-Winter.pdf
    • http://cefasfese.4pu.com/9736733733732732/Magic-Hatz-Tip-of-a-Hat-by-John-M-Adams.pdf
    • http://cefasfese.4pu.com/1731739733733730738/An-sich-Sein-F-r-sich-Sein-und-der-Andere-bei-Sartre-und-seine-Bez-ge-auf-Hegel-by-Christian-Walter.pdf
    • http://cefasfese.4pu.com/2732732730738735/Witz-by-Joshua-Cohen.pdf
    • http://cefasfese.4pu.com/9736733733732734/Rock-Gods-of-Acht-by-Diane-Hatz.pdf
    • http://cefasfese.4pu.com/1731731733738734733/Der-Echte-Judische-Witz-by-Jan-Meyerowitz.pdf
    • http://cefasfese.4pu.com/6735737730736733/Le-Carquois-de-Velours-L-Ironie-Au-Feminin-Dans-La-Litterature-Quebecoise-1960-1980-Essai-by-Lucie-Joubert.pdf
    • http://cefasfese.4pu.com/1730736733736730737/Der-Orient-Zyklus---Illustrierte-Ausgabe-Durch-die-W-ste-Durchs-wilde-Kurdistan-Von-Bagdad-nach-Stambul-In-den-Schluchten-des-Balkan-Durch-das-Land-by-Karl-May.pdf
    • http://cefasfese.4pu.com/97367387

Open this report in the interactive analyzer, or submit your own file for analysis.