Malicious PDF — malware analysis report

Static analysis result for SHA-256 f191bae7c99a89be…

MALICIOUS

PDF

14.7 KB Created: 2019-05-01 14:42:20 +01:00 Authoring application: mPDF 5.7
MD5: 6bd2efed1978cf6c43e4180d103d4860 SHA-1: 087df741c8bd924532557397c7b238e245dba86d SHA-256: f191bae7c99a89bea7a49d5db15055040331b6f478b53cfe1d483df344d8f031
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO poisoning or to distribute malicious content. The ML classifier strongly indicated maliciousness. No scripts were extracted, and the document body was heavily obfuscated, preventing a deeper analysis of the specific lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9798

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/8a06a07a00a02a09/The-Crossroads-Brotherhood-Crossroads-Brotherhood-0-5-by-Robert-Fabbri.pdf
    • http://muicuiu.dumb1.com/3a04a05a00a06/Crossroads-Crossroads-Saga-1-by-Mary-Ting.pdf
    • http://muicuiu.dumb1.com/3a04a05a01a07/Crossroads-of-Twilight-Wheel-of-Time-10-by-Robert-Jordan.pdf
    • http://muicuiu.dumb1.com/3a07a08a00a08a07/Crossroads-by-Skyy.pdf
    • http://muicuiu.dumb1.com/4a03a09a03a07a02/Crossroads-Road-by-Jeff-Kay.pdf
    • http://muicuiu.dumb1.com/1a01a04a05a03a07a00/Crossroads-Welcome-to-Tyler-10-by-Marisa-Carroll.pdf
    • http://muicuiu.dumb1.com/4a04a03a02a07a09/Beyond-Crossroads-Saga-3-by-Mary-Ting.pdf
    • http://muicuiu.dumb1.com/3a00a01a06a07a07/Crossroads-Finding-My-Way-2-by-Megan-Keith.pdf
    • http://muicuiu.dumb1.com/2a07a08a04a09a03/Beyond-Crossroads-Saga-3-by-Mary-Ting.pdf
    • http://muicuiu.dumb1.com/4a09a00a02a00a09/Crossroads-by-Nikita-Lynnette-Nichols.pdf
    • http://muicuiu.dumb1.com/1a06a00a09a03a05/Devil-at-the-Crossroads-by-Cornelia-Grey.pdf
    • http://muicuiu.dumb1.com/3a02a02a02a03a06/Big-Cypress-Crossroads-by-Bren-Christopher.pdf
    • http://muicuiu.dumb1.com/3a03a07a05a04a04/Crossroads-1969-by-John-W-Cassell.pdf
    • http://muicuiu.dumb1.com/1a03a04a01a08a03/Little-Prick-Shifting-Crossroads-9-by-Zenina-Masters.pdf
    • http://muicuiu.dumb1.com/3a08a07a09a00a01/Strangehold-Crossroads-of-Worlds-1-by-Rene-Sears.pdf
    • http://muicuiu.dumb1.com/5a00a04a01a02/Tin-God-Delta-Crossroads-Trilogy-1-by-Stacy-Green.pdf
    • http://muicuiu.dumb1.com/4a03a07a03a03a05/Kilimanjaro-Mountain-at-the-Crossroads-by-Audrey-Salkeld.pdf
    • http://muicuiu.dumb1.com/1a08a08a04a06a06/Crossroads-Miller-s-Creek-6-by-Cathy-Bryant.pdf
    • http://muicuiu.dumb1.com/1a03a04a08a04a05/Bearing-It-Shifting-Crossroads-6-by-Zenina-Masters.pdf
    • http://muicuiu.dumb1.com/3a06a09a04a02a07/The-Night-at-the-Crossroads-Maigret-7-by-Georges-Simenon.pdf
    • http://muicuiu.dumb1.com/3a03a07a05a04a04/C

Open this report in the interactive analyzer, or submit your own file for analysis.