Malicious PDF — malware analysis report

Static analysis result for SHA-256 ebe78793f492bfed…

MALICIOUS

PDF

18.5 KB Created: 2019-04-30 08:10:55 +01:00 Authoring application: mPDF 5.7
MD5: a856161c525178b6620e29c5bb22ba1f SHA-1: 59445cb9080a01915101d1d9597152df39c3ae70 SHA-256: ebe78793f492bfedda85cdf65aed3ef9b0821bfe3f90c66e7b42c84463e1c7f0
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded links pointing to external PDF documents hosted on the domain 'muicuiu.dumb1.com'. This behavior is indicative of a link farm or SEO poisoning attack, designed to drive traffic to specific content, potentially as a lure for further malicious activity. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/4a04a04a08a04a00/Cuentos-completos-by-Mario-Benedetti.pdf
    • http://muicuiu.dumb1.com/4a00a01a05a03a09/Rudyard-Kipling-The-Jungle-Book-The-Second-Jungle-Book-Just-So-Stories-Puck-of-Pook-s-Hill-Stalky-amp-Co-Kim-by-Rudyard-Kipling.pdf
    • http://muicuiu.dumb1.com/6a09a09a09a09a04/Lord-of-the-Jungle-Jungle-Island-1-by-Sheri-Fredricks.pdf
    • http://muicuiu.dumb1.com/7a07a08a00a03a03/THEREFORE-Forgive-Love-and-Rest-Stories-of-brokenness-turned-beautiful-H-E-L-P-Series-Book-1-by-Dena-Crecy.pdf
    • http://muicuiu.dumb1.com/7a01a00a04a00a01/Rest-Rabbit-Rest-by-Jacquelyn-Reinach.pdf
    • http://muicuiu.dumb1.com/1a01a03a00a08a08a04/Ramblings-of-a-reckless-man-By-Mario-L-Hicks-Flash-fiction-and-short-stories-Book-1-by-Pedro-Jaun.pdf
    • http://muicuiu.dumb1.com/7a07a03a09a09a00/The-Jungle-Book---Le-Livre-De-La-Jungle-A-Bilingual-Reader---Une-Livre-Bilingue-Classical-Language-Skills-Development-Series-8-by-Rudyard-Kipling.pdf
    • http://muicuiu.dumb1.com/8a05a08a04a02a03/Edgar-Poe-Le-Scarabee-D-Or-by-Benedetti-Christian.pdf
    • http://muicuiu.dumb1.com/1a00a00a07a04a03a09/Barbetta-the-laughing-goat---and-other-tales-by-Laura-Caterina-Benedetti.pdf
    • http://muicuiu.dumb1.com/8a08a00a08a06a07/Mario-Botta---Centre-D-rrenmatt-Neuch-tel-by-Mario-Botta.pdf
    • http://muicuiu.dumb1.com/4a00a07a04a01/Rudyard-Kipling-s-The-Jungle-Book-The-Mowgli-Stories-by-Rudyard-Kipling.pdf
    • http://muicuiu.dumb1.com/4a05a09a02a06a02/Rest-in-the-Mourning-by-R-H-Sin.pdf
    • http://muicuiu.dumb1.com/3a01a04a03a09a02/No-Certain-Rest-A-Novel-by-Jim-Lehrer.pdf
    • http://muicuiu.dumb1.com/2a00a09a07a06a00/The-Jungle-Book-by-Dan-Johnson.pdf
    • http://muicuiu.dumb1.com/8a05a09a08a07a09/The-Jungle-by-Upton-Sinclair.pdf
    • http://muicuiu.dumb1.com/6a02a08a01a01a03/The-Jungle-by-Upton-Sinclair.pdf
    • http://muicuiu.dumb1.com/4a03a09a06a07a09/Red-Jungle-by-Kent-Harrington.pdf
    • http://muicuiu.dumb1.com/7a09a09a08a06a00/The-Jungle-by-Upton-Sinclair.pdf
    • http://muicuiu.dumb1.com/1a07a06a07a09a07/X-Men-Law-of-the-Jungle-by-Dave-Smeds.pdf
    • http://muicuiu.dumb1.com/1a05a08a01a03a09/The-Asphalt-Jungle-by-W-R-Burnett.pdf
    • http://muicuiu.dumb1.com/1a01a03a00a08a08a04/Ramblings-of-a-reckles

Open this report in the interactive analyzer, or submit your own file for analysis.