Malicious PDF — malware analysis report

Static analysis result for SHA-256 f057aa2e8da86d1f…

MALICIOUS

PDF

17.9 KB Created: 2020-03-20 01:16:45 +00:00 Authoring application: mPDF 5.7
MD5: d8252eddc13e7f9e7932bee9b1d67c2f SHA-1: 1af23f80395c16ce42259335f85a8e92c8afa813 SHA-256: f057aa2e8da86d1fe3685422f1bcf543e5f6a0fc29183e5d125c22c52c2305db
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded URLs pointing to external PDF files hosted on the domain kitasdyu.myhome.cx. This is indicative of a link farm or SEO poisoning attack, designed to drive traffic to potentially malicious or unwanted content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9788

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://kitasdyu.myhome.cx/3877879874874874/Men-s-Guide-to-Being-a-Single-Parent-Different-Animal-Than-Women-Single-Parents-by-Henry-Lee-Thomas.pdf
    • http://kitasdyu.myhome.cx/1876872873877874/Why-Am-I-Still-Single-A-Tough-Love-Guide-for-Single-Women-by-Shay-Stone.pdf
    • http://kitasdyu.myhome.cx/1876875874872877/Single-Minded-Single-Girls-3-by-Veronica-Blade.pdf
    • http://kitasdyu.myhome.cx/1876875874874872/Single-Handed-Single-Girls-1-by-Veronica-Blade.pdf
    • http://kitasdyu.myhome.cx/4874873871876875/Single-Volume-2-Single-2-by-Lyra-Parish.pdf
    • http://kitasdyu.myhome.cx/3870870877878870/Sherman-s-Lagoon-Ate-That-What-s-Next-by-Jim-Toomey.pdf
    • http://kitasdyu.myhome.cx/3870870877878871/Poodle-The-Other-White-Meat-by-Jim-Toomey.pdf
    • http://kitasdyu.myhome.cx/5876878876871878/The-Single-Proverbs-31-Woman-Series-A-Guide-to-Waiting-for-the-Single-Proverbs-31-Man-by-Alice-Giraud.pdf
    • http://kitasdyu.myhome.cx/2879879870879873/Planet-of-the-Hairless-Beach-Apes-by-Jim-Toomey.pdf
    • http://kitasdyu.myhome.cx/4871875874876876/Swinging-Bridge-by-Debra-Shiveley-Welch.pdf
    • http://kitasdyu.myhome.cx/4872876877877879/Swinging-for-the-Fences-Black-Baseball-in-Minnesota-by-Steven-R-Hoffbeck.pdf
    • http://kitasdyu.myhome.cx/3870870877878874/Surf-s-Up-The-1994-to-1995-Sherman-s-Lagoon-Collection-by-Jim-Toomey.pdf
    • http://kitasdyu.myhome.cx/5873874879873877/Swinging-in-Paradise-The-Story-of-Jazz-in-Montreal-by-John-Gilmore.pdf
    • http://kitasdyu.myhome.cx/9877873872878874/Confessions-of-a-Sex-Fiend-Bound-to-Collide-Confessions-4-by-Rayven-Godchild.pdf
    • http://kitasdyu.myhome.cx/3870870877878873/Sherman-s-Lagoon-1991-to-2001-Greatest-Hits-and-Near-Misses-by-Jim-Toomey.pdf
    • http://kitasdyu.myhome.cx/2876878877871875/Swinging-on-the-Garden-Gate-A-Spiritual-Memoir-by-Elizabeth-Jarrett-Andrew.pdf
    • http://kitasdyu.myhome.cx/1872877874872874/Confessions-of-an-Angry-Girl-Confessions-1-by-Louise-Rozett.pdf
    • http://kitasdyu.myhome.cx/1872879875874876/Confessions-of-a-Murder-Suspect-Confessions-1-by-James-Patterson.pdf
    • http://kitasdyu.myhome.cx/4878875872871872/Confessions-The-Paris-Mysteries-Confessions-3-by-James-Patterson.pdf
    • http://kitasdyu.myhome.cx/5876878875874877/The-Single-Proverbs-31-Woman-A-Guide-to-Being-Beautiful-Inside-amp-Out-The-Single-Proverbs-31-Woman-Series-by-Alice-Giraud.pdf
    • http://kitasdyu.myhome.cx/2879879870879873/Planet-of-the-Hairless-Beach-A

Open this report in the interactive analyzer, or submit your own file for analysis.