Malicious PDF — malware analysis report

Static analysis result for SHA-256 f1b82521317b114b…

MALICIOUS

PDF

25.7 KB Created: 2020-03-20 11:47:41 +00:00 Authoring application: mPDF 5.7
MD5: 35209784feb2412fb04460607cb99569 SHA-1: 0fa10df4000b32cf564e8de310b6df26cb9b08fb SHA-256: f1b82521317b114b13d9cc1ea3924d240dc5e872d756d1ff43d7819de392ec3e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of external links, identified by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this PDF as malicious. The embedded URLs, such as http://ieuicufioao.myhome.cx/2552555551552559/A-Bride-By-Christmas-Home-For-Christmas-The-Wise-Virgin-Tumbleweed-Christmas-by-Heather-Graham.pdf, are likely used for SEO spam or to redirect users to malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9695

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://ieuicufioao.myhome.cx/2552555551552559/A-Bride-By-Christmas-Home-For-Christmas-The-Wise-Virgin-Tumbleweed-Christmas-by-Heather-Graham.pdf
    • http://ieuicufioao.myhome.cx/2559551553559550/A-Christmas-Bride-Christmas-Beau-Stapleton-Downes-7-included-by-Mary-Balogh.pdf
    • http://ieuicufioao.myhome.cx/5550552554551556/An-Angel-for-Christmas-by-Heather-Graham.pdf
    • http://ieuicufioao.myhome.cx/2552555550550553/Romancing-the-Holiday-We-ll-Be-Home-for-Christmas-Ask-Her-at-Christmas-The-Best-Thing-by-Jaci-Burton.pdf
    • http://ieuicufioao.myhome.cx/3558558555552556/Silhouette-Christmas-Stories-Home-for-Christmas-Let-it-Snow-Starbright-Under-the-Mistletoe-by-Nora-Roberts.pdf
    • http://ieuicufioao.myhome.cx/6551558550557/The-Christmas-Box-Collection-The-Christmas-Box-Timepiece-The-Letter-The-Christmas-Box-1-3-by-Richard-Paul-Evans.pdf
    • http://ieuicufioao.myhome.cx/2551556554557550/Bring-Me-Home-for-Christmas-Virgin-River-14-by-Robyn-Carr.pdf
    • http://ieuicufioao.myhome.cx/1551558551552/Be-Mine-at-Christmas-Just-like-the-Ones-We-Used-to-Know-On-a-Snowy-Christmas-A-Dundee-Christmas-by-Brenda-Novak.pdf
    • http://ieuicufioao.myhome.cx/2552555550552553/Home-for-the-Holidays-The-Forgetful-Bride-When-Christmas-Comes-by-Debbie-Macomber.pdf
    • http://ieuicufioao.myhome.cx/9555556551553551/A-Christmas-Potpourri-14-Christmas-stories-Christmas-Potpourri-2-by-Jennifer-AlLee.pdf
    • http://ieuicufioao.myhome.cx/2555551555557552/An-Amish-Family-Christmas-Heart-of-Christmas-A-Plain-Holiday-by-Marta-Perry.pdf
    • http://ieuicufioao.myhome.cx/7558550551554550/Night-Before-Christmas-Rubber-Stamp-Storybook-and-Christmas-Crafts-by-Clement-C-Moore.pdf
    • http://ieuicufioao.myhome.cx/9558552557557554/The-Catholic-Christmas-Book-of-Cherished-Christmas-Customs-by-Franz-Xaver-Weiser.pdf
    • http://ieuicufioao.myhome.cx/5550553553552550/A-Blue-and-Gray-Christmas-Christmas-Keeps-Love-and-Hope-Alive-During-War-by-Vickie-McDonough.pdf
    • http://ieuicufioao.myhome.cx/5550552558557550/The-Christmas-House-How-One-Man-s-Dream-Changed-the-Way-We-Celebrate-Christmas-by-Georja-Skinner.pdf
    • http://ieuicufioao.myhome.cx/3558554559557556/Literary-Christmas-Great-Contemporary-Christmas-Stories-by-Lilly-Golden.pdf
    • http://ieuicufioao.myhome.cx/6550558555553552/The-Sheikh-s-Christmas-Fling-Christmas-With-the-Yared-Sheikhs-1-by-Leslie-North.pdf
    • http://ieuicufioao.myhome.cx/2550556557559556/A-Sweet-Montana-Christmas-This-Old-House-2-A-Marietta-Christmas-6-by-Roxanne-Snopek.pdf
    • http://ieuicufioao.myhome.cx/4553554553557550/Cowboy-Christmas-A-Henley-Christmas-Novella-Down-Under-Cowboys-2-5-by-Kasey-Millstead.pdf
    • http://ieuicufioao.myhome.cx/7552555558552555/A-Christmas-Carol-in-Prose-Being-A-Ghost-Story-of-Christmas-by-Charles-Dickens.pdf
    • http://ieuicufioao.myhome.cx/6551558550557/The-Christmas-Box-Collection-The-Christmas-Box-Timepiece-The-Letter-The-Christmas-Box-1-

Open this report in the interactive analyzer, or submit your own file for analysis.