Malicious PDF — malware analysis report

Static analysis result for SHA-256 ed8bc8be8010020e…

MALICIOUS

PDF

18.7 KB Created: 2019-04-30 04:13:37 +01:00 Authoring application: mPDF 5.7
MD5: 1e35eeb8a1b8d1258866027c770dc71f SHA-1: 7b931f28511b8cca35dc02a3ccbbf2d08a5ee2a8 SHA-256: ed8bc8be8010020e738c4b397c6a239e5b8fe46020de663f88264f5b85a55de3
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified as a link farm. While the document body is heavily obfuscated, the presence of numerous external links suggests a malicious intent, possibly for SEO manipulation or to redirect users to further malicious content. The ML classifier strongly supports the malicious verdict.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/2a09a03a08a09/The-Real-Wild-West-The-101-Ranch-and-the-Creation-of-the-American-West-by-Michael-Wallis.pdf
    • http://muicuiu.dumb1.com/4a06a03a02a06a00/Wild-West-Wedding-River-s-End-Ranch-9-by-Caroline-Lee.pdf
    • http://muicuiu.dumb1.com/4a09a05a00a09a03/Revolution-on-the-Range-The-Rise-of-a-New-Ranch-in-the-American-West-by-Courtney-White.pdf
    • http://muicuiu.dumb1.com/3a07a00a01a00a00/Kearny-s-March-The-Epic-Creation-of-the-American-West-1846-1847-by-Winston-Groom.pdf
    • http://muicuiu.dumb1.com/2a05a07a05a05a00/The-Last-Gunfight-The-Real-Story-of-the-Shootout-at-the-O-K-Corral--And-How-It-Changed-The-American-West-by-Jeff-Guinn.pdf
    • http://muicuiu.dumb1.com/7a00a05a08a01a00/Boudoirs-to-Brothels-The-Intimate-World-of-Wild-West-Women-by-Michael-Rutter.pdf
    • http://muicuiu.dumb1.com/3a00a00a07a05a06/Wild-West-Boys-Wild-West-Boys-1-2-by-Lorelei-James.pdf
    • http://muicuiu.dumb1.com/7a07a06a08a03a00/All-New-Popular-Comics-Wild-Wild-West-Issue-by-David-Noe.pdf
    • http://muicuiu.dumb1.com/4a04a01a04a05a03/The-Gospel-According-to-Woman-Christianity-s-Creation-of-the-Sex-War-in-the-West-by-Karen-Armstrong.pdf
    • http://muicuiu.dumb1.com/2a02a05a09a06a08/Wild-Wild-West-by-Charlene-Teglia.pdf
    • http://muicuiu.dumb1.com/3a04a03a02a01a08/West-Wind-s-Fool-and-Other-Stories-of-the-Devil-s-West-by-Laura-Anne-Gilman.pdf
    • http://muicuiu.dumb1.com/5a01a09a09a08a08/The-East-Face-of-Helicon-West-Asiatic-Elements-in-Greek-Poetry-and-Myth-by-M-L-West.pdf
    • http://muicuiu.dumb1.com/4a03a07a08a06a00/Fela-From-West-Africa-to-West-Broadway-by-Trevor-Schoonmaker.pdf
    • http://muicuiu.dumb1.com/1a03a00a00a07a06/The-West-Series-Boxset-West-1-3-by-Jill-Sanders.pdf
    • http://muicuiu.dumb1.com/4a02a00a07a06a02/The-Gentle-Tamers-Women-of-the-Old-Wild-West-by-Dee-Brown.pdf
    • http://muicuiu.dumb1.com/8a00a02a02a09/The-Last-of-the-Wild-West-Cowgirls-A-True-Story-by-Kay-Turnbaugh.pdf
    • http://muicuiu.dumb1.com/8a03a07a02a01a01/Wild-Pill-Hickok-And-Other-Old-West-Riddles-by-David-A-Adler.pdf
    • http://muicuiu.dumb1.com/1a07a01a05a06a08/Miss-Firecracker-Wild-West-Boys-2-by-Lorelei-James.pdf
    • http://muicuiu.dumb1.com/3a09a04a01a09a08/Wild-West-Weekend-Perfect-Ponies-12-by-Katie-Price.pdf
    • http://muicuiu.dumb1.com/1a09a07a03a06/Three-Plays-by-Mae-West-Sex-The-Drag-The-Pleasure-Man-by-Mae-West.pdf
    • http://muicuiu.dumb1.com/7a00a05a08a01a00/Boudoirs-to-Brothels-The-Intimate-Worl

Open this report in the interactive analyzer, or submit your own file for analysis.