Malicious PDF — malware analysis report

Static analysis result for SHA-256 efdc680b15ccbbe4…

MALICIOUS

PDF

19.3 KB Created: 2019-04-30 18:55:41 +01:00 Authoring application: mPDF 5.7
MD5: a1c93a049a97369afab2eebccc389c30 SHA-1: d99f25560de7a261452e7ef57965edc512f97523 SHA-256: efdc680b15ccbbe4ddb5bca1c759432f2047cf418b1b0590566c2b27647475d0
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified as a link farm. While the URLs themselves are marked as benign, the sheer volume and the heuristic firing of PDF_SEO_LINK_FARM indicate a malicious intent, likely for SEO manipulation or to distribute further malicious content. The ML classifier strongly supports the malicious verdict.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/2a00a04a06a06a06/Lady-Be-Good-The-Grand-Russe-Hotel-3-by-Heather-Hiestand.pdf
    • http://muicuiu.dumb1.com/3a03a00a06a02a09/The-Marquess-of-Cake-Redcakes-1-by-Heather-Hiestand.pdf
    • http://muicuiu.dumb1.com/4a06a09a07a08a06/Captain-Andrew-s-Flying-Christmas-Steampunk-Smugglers-1-by-Heather-Hiestand.pdf
    • http://muicuiu.dumb1.com/1a01a03a07a04a02a06/The-Grand-Babylon-Hotel-by-Arnold-Bennett.pdf
    • http://muicuiu.dumb1.com/1a09a08a09a04a01/The-Grand-Budapest-Hotel-The-Illustrated-Screenplay-by-Wes-Anderson.pdf
    • http://muicuiu.dumb1.com/2a00a01a01a03/A-Hopeful-Heart-Hearts-of-Lancaster-Grand-Hotel-1-by-Amy-Clipston.pdf
    • http://muicuiu.dumb1.com/5a06a01a01a04/The-Lonely-Hearts-Hotel-by-Heather-O-39-Neill.pdf
    • http://muicuiu.dumb1.com/2a02a05a03a05a07/London-Lady-by-Heather-Hart.pdf
    • http://muicuiu.dumb1.com/3a06a04a01a06a00/The-Watchmaker-s-Lady-by-Heather-Massey.pdf
    • http://muicuiu.dumb1.com/2a03a05a02a06a01/A-Lady-in-Defiance-Romance-in-the-Rockies-1-by-Heather-Blanton.pdf
    • http://muicuiu.dumb1.com/3a04a05a03a06a00/Grace-be-a-Lady-Love-amp-War-in-Johnson-County-1-by-Heather-Blanton.pdf
    • http://muicuiu.dumb1.com/3a05a01a08a00a01/Lady-Be-Good-by-Amber-Brock.pdf
    • http://muicuiu.dumb1.com/1a01a02a04a08a06a03/Strangely-Incredibly-Good-Strangely-Incredibly-Good-1-by-Heather-Grace-Stewart.pdf
    • http://muicuiu.dumb1.com/4a02a00a06a04a01/Remarkably-Great-Strangely-Incredibly-Good-2-by-Heather-Grace-Stewart.pdf
    • http://muicuiu.dumb1.com/2a04a09a09a02a09/Lady-Be-Good-Rules-for-the-Reckless-3-by-Meredith-Duran.pdf
    • http://muicuiu.dumb1.com/1a09a01a07a00a08/Lady-Spy-Gentleman-Explorer-The-life-of-Herbert-Dyce-Murphy-the-most-extraordinary-Australian-you-ve-never-heard-of-by-Heather-Rossiter.pdf
    • http://muicuiu.dumb1.com/3a05a08a05a08a01/Find-the-Good-Unexpected-Life-Lessons-from-a-Small-Town-Obituary-Writer-by-Heather-Lende.pdf
    • http://muicuiu.dumb1.com/2a01a01a07a05/Seduction-of-an-English-Beauty-Grand-Passion-on-the-Grand-Tour-2-by-Miranda-Jarrett.pdf
    • http://muicuiu.dumb1.com/4a09a04a03a02/The-Lady-Waved-Good-Bye-A-Ramon-Lull-Lopez-Mystery-by-Natalio-Feliciano.pdf
    • http://muicuiu.dumb1.com/9a07a09a05a05a05/Die-nackte-Klavierspielerin-Scharfe-Geschichten-aus-dem-Love-Hotel-in-Playa-del-Carmen-Love-Hotel-Karibische-See-87-by-Heinz-Peter-Tjaden.pdf
    • http://muicuiu.dumb1.com/2a03a05a02a06a01/A-Lady-in-Defiance-Romance-in-th

Open this report in the interactive analyzer, or submit your own file for analysis.