Malicious PDF — malware analysis report

Static analysis result for SHA-256 ec15e9492da09dd7…

MALICIOUS

PDF

28.0 KB Created: 2019-05-01 17:14:05 +01:00 Authoring application: mPDF 5.7
MD5: e212816db621fd02ea7bb7ffb931d3f3 SHA-1: 3dcf01ae62792663ceb23dfc161459e013bb2654 SHA-256: ec15e9492da09dd74217c2523f0a7f336bad54e8cfcd5f7819b5af0b0a4de4cf
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links pointing to external PDF files hosted on the domain 'kiteeearpdf.myhome.cx'. This heuristic, combined with the ML classifier's high confidence, suggests a link-farming or redirection scheme. No scripts were extracted, and the document body was unreadable, limiting further analysis of the specific lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://kiteeearpdf.myhome.cx/1f211f216f215f210f219f218/Goethe-in-Der-Epoche-Seiner-Vollendung-1805-1832-Versuch-Einer-Darstellung-Seiner-Denkweise-Und-Weltbetrachtung-Classic-Reprint-by-Otto-Harnack.pdf
    • http://kiteeearpdf.myhome.cx/1f211f216f215f210f219f217/Goethe-in-Der-Epoche-Seiner-Vollendung-1805-1832-Versuch-Einer-Darstellung-Seiner-Denkweise-Und-Weltbetrachtung-Classic-Reprint-by-Otto-Harnack.pdf
    • http://kiteeearpdf.myhome.cx/1f211f216f215f210f219f211/Goethe-in-Der-Epoche-Seiner-Vollendung-1805-1832-Versuch-Einer-Darstellung-Seiner-Denkweise-Und-Weltbetrachtung-by-Otto-Harnack.pdf
    • http://kiteeearpdf.myhome.cx/9f214f211f215f217f212/Goethe-in-Seiner-Epoche-Zw-lf-Versuche-by-Christoph-Perels.pdf
    • http://kiteeearpdf.myhome.cx/9f216f216f214f217f214/Der-berhitzte-Dampf-Darstellung-Seiner-Ausschliesslichen-Anwendung-in-Den-Gegenw-rtigen-Und-Zuk-nftigen-Dampfbetrieben-by-Raimund-Schenkel.pdf
    • http://kiteeearpdf.myhome.cx/8f217f215f214f217f219/Das-Deutsche-Rathaus-Im-Mittelalter-In-Seiner-Entwickelung-Geschildert-by-Otto-Stiehl.pdf
    • http://kiteeearpdf.myhome.cx/1f210f219f217f219f217f213/W-lfe-Seer-uber---Entf-hrung-seiner-Geliebten-mit-seiner-Bande-der-W-lfe-by-Jenna-Ash-Lee.pdf
    • http://kiteeearpdf.myhome.cx/1f211f218f214f215f210f218/D-blin-Und-China-Untersuchung-Zu-D-blins-Rezeption-Des-Chinesischen-Denkens-Und-Seiner-Literarischen-Darstellung-Chinas-In-quot-Drei-Spr-nge-Des-Wang-Lun-quot-by-Jia-Ma.pdf
    • http://kiteeearpdf.myhome.cx/1f211f215f214f213f217f217/Briefwechsel-Zwischen-Goethe-Und-Zelter-in-Den-Jahren-1796-Bis-1832-Vol-6-Die-Jahre-1830-July-Bis-1832-by-Friedrich-Wilhelm-Riemer.pdf
    • http://kiteeearpdf.myhome.cx/1f210f212f212f213f219f213/Der-Weltverbesserer-Lustspiel-in-2-Aufz-gen-Nach-Der-Widmann-schen-Novelle-Die-Weltverbesserer-Classic-Reprint-by-Otto-von-Greyerz.pdf
    • http://kiteeearpdf.myhome.cx/1f211f215f214f213f211f214/Briefwechsel-Zwischen-Goethe-Und-Zelter-in-Den-Jahren-1796-Bis-1832-Erster-Theil-by-Johann-Wolfgang-von-Goethe.pdf
    • http://kiteeearpdf.myhome.cx/1f211f215f214f213f218f212/Briefwechsel-Zwischen-Goethe-Und-Zelter-in-Den-Jahren-1796-Bis-1832-Vol-5-Die-Jahre-1828-Bis-1830-Juny-by-Johann-Wolfgang-von-Goethe.pdf
    • http://kiteeearpdf.myhome.cx/1f210f212f212f213f219f212/Der-Weltverbesserer-Lustspiel-in-2-Aufz-gen-Nach-Der-Widmann-schen-Novelle-quot-die-Weltverbesserer-quot-Classic-Reprint-by-Otto-von-Greyerz.pdf
    • http://kiteeearpdf.myhome.cx/1f211f215f214f213f217f219/Briefwechsel-Zwischen-Goethe-Und-Zelter-in-Den-Jahren-1796-Bis-1832-Vol-1-Die-Jahre-1796-Bis-1811-by-Johann-Wolfgang-von-Goethe.pdf
    • http://kiteeearpdf.myhome.cx/1f210f218f217f214f210f219/Rom-in-der-Sp-tantike-Portr-t-einer-Epoche-by-Manfred-Fuhrmann.pdf
    • http://kiteeearpdf.myhome.cx/2f212f217f211f210f214/Der-Erfahrbare-Atem-in-seiner-Substanz-by-Ilse-Middendorf.pdf
    • http://kiteeearpdf.myhome.cx/1f211f212f214f215f215f212/Mozart---Die-R-tsel-seiner-Zauberfl-te-by-Hanskarl-K-lsch.pdf
    • http://kiteeearpdf.myhome.cx/9f215f215f219f213f215/Der-Struwwelpeter-in-seiner-ersten-Gestalt-by-Heinrich-Hoffmann.pdf
    • http://kiteeearpdf.myhome.cx/1f210f210f216f215f211f219/Das-Dunkel-seiner-Seele-by-Ethan-Parker-Wilde.pdf
    • http://kiteeearpdf.myhome.cx/1f211f219f218f212f213f211/Yoga---Entspannung-in-seiner-Vielfalt-by-Erna-Hildegard-D-Nigus.pdf
    • http://kiteeearpdf.myhome.cx/1f211f216f215f210f219f211/Goethe-in-Der-Epoche-Seiner-Vollendung-1805-1832-Versuch-Einer-Darstellung-Seiner-Denkweise-Und-Weltbetrachtung-by-Otto-Harnack.p

Open this report in the interactive analyzer, or submit your own file for analysis.