Malicious PDF — malware analysis report

Static analysis result for SHA-256 eae50c9046eb9dc1…

MALICIOUS

PDF

16.9 KB Created: 2019-04-30 06:01:43 +01:00 Authoring application: mPDF 5.7
MD5: 4cd25a21b3218bb0aca39dd212718c7b SHA-1: 270e858a2451d31ecb18e3a8a064ad991557b283 SHA-256: eae50c9046eb9dc1675ef6833730b0072642519689917ca73689f51052609ca6
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF was flagged by a machine learning classifier and contains a large number of embedded external links, indicative of a link farm. While the document body is heavily obfuscated, the presence of numerous URLs suggests a potential for redirecting users to malicious sites or for SEO manipulation. The primary heuristic indicates a link farm with 23 external links, with the first being http://muicuiu.dumb1.com/7a05a05a06a05a09/After-Nature-by-W-G-Sebald.pdf.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/7a05a05a06a05a09/After-Nature-by-W-G-Sebald.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a09a09a06/Adolescence-gt-Custom-lt-Author-Sebald-Publisher-Pearson-C-by-Sebald.pdf
    • http://muicuiu.dumb1.com/8a09a02a00a03a00/Searching-for-Sebald-Photography-After-W-G-Sebald-by-Lise-Patt.pdf
    • http://muicuiu.dumb1.com/3a04a01a05a04a02/Beyond-Ecophobia-Reclaiming-the-Heart-in-Nature-Education-Nature-Literacy-Series-Vol-1-Nature-Literacy-by-David-Sobel.pdf
    • http://muicuiu.dumb1.com/6a07a04a01a06a07/The-Wholeness-of-Nature-Goethe-s-Way-Toward-a-Science-of-Conscious-Participation-in-Nature-by-Henri-Bortoft.pdf
    • http://muicuiu.dumb1.com/2a06a07a05a00a08/Your-Brain-On-Nature-The-Science-of-Nature-s-Influence-on-Your-Health-Happiness-and-Vitality-by-Eva-M-Selhub.pdf
    • http://muicuiu.dumb1.com/3a02a09a01a08a08/It-s-Just-My-Nature-A-Guide-to-Knowing-and-Living-Your-True-Nature-by-Carol-Tuttle.pdf
    • http://muicuiu.dumb1.com/1a01a01a05a05a07a02/The-Nature-of-Nature-The-Earth-is-Square-Like-You-by-Disa-Wallander.pdf
    • http://muicuiu.dumb1.com/5a00a03a00a02a05/Bound-By-Nature-Forces-of-Nature-1-by-Cooper-Davis.pdf
    • http://muicuiu.dumb1.com/1a05a01a00a07a04/The-Emigrants-by-W-G-Sebald.pdf
    • http://muicuiu.dumb1.com/9a03a09a08a05/The-Emigrants-by-W-G-Sebald.pdf
    • http://muicuiu.dumb1.com/3a02a03a08a00a09/Austerlitz-by-W-G-Sebald.pdf
    • http://muicuiu.dumb1.com/9a04a01a05a06/The-Rings-of-Saturn-by-W-G-Sebald.pdf
    • http://muicuiu.dumb1.com/8a06a07a01a05a04/Young-Austerlitz-by-W-G-Sebald.pdf
    • http://muicuiu.dumb1.com/3a04a04a00a05/The-Rings-of-Saturn-by-W-G-Sebald.pdf
    • http://muicuiu.dumb1.com/7a08a07a00a04a01/Campo-Santo-by-W-G-Sebald.pdf
    • http://muicuiu.dumb1.com/3a09a02a02a04a02/Man-Nature-and-the-Nature-of-Man-by-Alan-W-Watts.pdf
    • http://muicuiu.dumb1.com/4a07a09a03a03a03/Vertigo-New-Directions-Paperbook-by-W-G-Sebald.pdf
    • http://muicuiu.dumb1.com/8a06a02a08a08/On-the-Natural-History-of-Destruction-by-W-G-Sebald.pdf
    • http://muicuiu.dumb1.com/1a01a00a00a09a08a09/Saturn-s-Moons-A-W-G-Sebald-Handbook-by-Jo-Catling.pdf
    • http://muicuiu.dumb1.com/2a06a07a05a00a08/Your-Brain-

Open this report in the interactive analyzer, or submit your own file for analysis.