Malicious PDF — malware analysis report

Static analysis result for SHA-256 efd8c99669ca7651…

MALICIOUS

PDF

17.8 KB Created: 2019-05-02 00:58:13 +01:00 Authoring application: mPDF 5.7
MD5: c0dd393ea07831e2d970acbe4029bce8 SHA-1: 62728548094da10fd02d32f5bc94ccc79b7bbc84 SHA-256: efd8c99669ca7651dadab50ce707869f156340a81d5e1fe03d8c4163f77f234e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of embedded external links. The heuristic 'PDF_SEO_LINK_FARM' indicates that these links are likely part of a link farm, a common tactic for SEO manipulation or distributing malicious content. While the document body is unreadable, the presence of numerous links to other PDFs suggests a content distribution or redirection scheme.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9788

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/6a05a08a04a00a02/Invisible-keepers-Guardian-Fairy-Book-1-by-Anastasia-Ducret.pdf
    • http://muicuiu.dumb1.com/6a05a08a03a06a05/The-monster-in-the-bathroom-Guardian-Fairy-Book-3-by-Anastasia-Ducret.pdf
    • http://muicuiu.dumb1.com/6a05a08a03a01a04/Les-portes-multicolores-F-e-gardienne-t-4-by-Anastasia-Ducret.pdf
    • http://muicuiu.dumb1.com/6a05a08a03a06a04/Les-mille-et-une-facettes-du-cristal-magique-F-e-gardienne-t-6-by-Anastasia-Ducret.pdf
    • http://muicuiu.dumb1.com/4a01a00a06a05a05/Beauty-A-novella-of-The-Invisible-The-Invisible-Episode-Book-1-by-Janean-Worth.pdf
    • http://muicuiu.dumb1.com/2a06a05a08a06a03/The-Invisible-Guardian-Bazt-n-1-by-Dolores-Redondo.pdf
    • http://muicuiu.dumb1.com/1a07a06a02a02a06/The-World-Keepers-Three-Book-Set-Roblox-Fantasy-The-World-Keepers-1-3-by-Ty-The-Hunter.pdf
    • http://muicuiu.dumb1.com/1a03a09a06a04/Anastasia-Has-the-Answers-Anastasia-Krupnik-6-by-Lois-Lowry.pdf
    • http://muicuiu.dumb1.com/1a04a00a08a02/Anastasia-at-Your-Service-Anastasia-Krupnik-3-by-Lois-Lowry.pdf
    • http://muicuiu.dumb1.com/4a09a08a06a00a00/Anastasia-at-This-Address-Anastasia-Krupnik-8-by-Lois-Lowry.pdf
    • http://muicuiu.dumb1.com/2a03a05a03a00a05/Anastasia-on-Her-Own-Anastasia-Krupnik-5-by-Lois-Lowry.pdf
    • http://muicuiu.dumb1.com/1a04a01a01a00/Anastasia-Again-Anastasia-Krupnik-2-by-Lois-Lowry.pdf
    • http://muicuiu.dumb1.com/1a07a06a02a08a04/The-World-Keepers---Book-6-by-Ty-The-Hunter.pdf
    • http://muicuiu.dumb1.com/7a02a05a08a03a09/NO-SPHERE-Golden-Autumnal-Celebration-NO-S-MAG-Book-19-by-Anastasia-Fennell.pdf
    • http://muicuiu.dumb1.com/1a06a07a07a07a09/LUST-Book-Two-of-the-Shadow-Keepers-Series-by-Jas-T-Ward.pdf
    • http://muicuiu.dumb1.com/1a06a02a01a00a07/Bestow-The-Nature-Keepers-Series-Book-1-by-J-S-Kirkland.pdf
    • http://muicuiu.dumb1.com/4a02a00a00a03a07/Call-of-Kythshire-Keepers-of-the-Wellsprings-Book-One-by-Missy-Sheldrake.pdf
    • http://muicuiu.dumb1.com/1a01a07a07a03a06a04/Virtuosity-in-Business-Invisible-Law-Guiding-the-Invisible-Hand-by-Kevin-T-Jackson.pdf
    • http://muicuiu.dumb1.com/1a01a09a05a02a02a04/Children-s-Book-Kate-Gets-Dressed-with-Dressy-Fairy-Great-Bedtime-Story-for-Kids-Age-4---8-Educational-Book-by-Shulamit-Zilberberg.pdf
    • http://muicuiu.dumb1.com/7a03a01a01a05a09/Guardian-Book-Of-The-Countryside-by-Phil-Daoust.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.