Malicious PDF — malware analysis report

Static analysis result for SHA-256 f431e98cac60a80b…

MALICIOUS

PDF

29.5 KB Created: 2020-03-20 01:40:55 +00:00 Authoring application: mPDF 5.7
MD5: aeca89ac1aa3d6f5094cc97714edc3dc SHA-1: 778916eff36d973f384296801a67ebfea3dadcbe SHA-256: f431e98cac60a80bdde669f0febb7abaf666d7e9c9508a97c5f5b5be96789c40
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded URLs, identified as a link farm. The primary heuristic indicates a critical finding related to this link farm, suggesting a malicious intent to redirect users to external content. The ML classifier also flagged the document with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9904

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://hicsniso.myhome.cx/5e50e52e55e55e53/Articles-on-Harry-Bosch-Series-Including-Harry-Bosch-the-Overlook-Echo-Park-Novel-the-Narrows-Novel-the-Closers-City-of-Bones-Novel-a-Darkness-More-Than-Night-Angels-Flight-Novel-Trunk-Music-Novel-the-Last-Coyote-by-Hephaestus-Books.pdf
    • http://hicsniso.myhome.cx/4e59e50e53e50e52/Trunk-Music-Harry-Bosch-5-Harry-Bosch-Universe-6-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/4e53e58e57e51/Echo-Park-Harry-Bosch-12-Harry-Bosch-Universe-16-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/4e51e53e57e51/Angels-Flight-Harry-Bosch-6-Harry-Bosch-Universe-7-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/4e58e57e56e54e55/A-Darkness-More-Than-Night-Harry-Bosch-7-Terry-McCaleb-2-Harry-Bosch-Universe-9-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/1e54e50e56e55e58/The-Closers-Harry-Bosch-11-Harry-Bosch-Universe-14-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/8e53e55e55e55/The-Closers-Harry-Bosch-11-Harry-Bosch-Universe-14-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/1e56e54e59e57/The-Black-Echo-Harry-Bosch-1-Harry-Bosch-Universe-1-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/5e56e52e58e52e58/Suicide-Run-Three-Harry-Bosch-Stories-Harry-Bosch-14-6-Harry-Bosch-Universe-22-1-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/4e54e56e51e57e59/The-Last-Coyote-Harry-Bosch-Mystery-4-Harry-Bosch-Mystery-4-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/4e56e57e55e52e57/The-Reversal-Harry-Bosch-16-Mickey-Haller-3-Harry-Bosch-Universe-21-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/6e55e58e54/Two-Kinds-of-Truth-Harry-Bosch-20-Harry-Bosch-Universe-30-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/1e55e56e57e59e52/The-Burning-Room-Harry-Bosch-17-Harry-Bosch-Universe-26-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/2e58e57e58e50e53/The-Drop-Harry-Bosch-17-Harry-Bosch-Universe-23-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/4e59e50e52e51e57/A-Darkness-More-Than-Night-Harry-Bosch-7-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/5e56e54e52e50e51/Articles-on-Aviation-Accidents-and-Incidents-in-1961-Including-Sabena-Flight-548-United-Airlines-Flight-859-Northwest-Orient-Airlines-Flight-706-1961-Cincinnati-Zantop-DC-4-Crash-Aero-Flight-311-1961-Yuba-City-B-52-Crash-by-Hephaestus-Books.pdf
    • http://hicsniso.myhome.cx/9e52e54e52e59/Articles-on-Enid-Blyton-Series-Including-The-Famous-Five-Series-the-Secret-Seven-Malory-Towers-the-Faraway-Tree-St-Clare-s-Series-the-Five-Find-Outers-the-Adventure-Series-the-Wishing-Chair-Series-the-Circus-Series-by-Hephaestus-Books.pdf
    • http://hicsniso.myhome.cx/1e50e50e54e53e55e58/Articles-on-Goosebumps-Including-R-L-Stine-Goosebumps-TV-Series-List-of-Goosebumps-Books-List-of-Goosebumps-Episodes-Attack-of-the-Mutant-Video-Game-Chillogy-Halloween-Night-Goosebumps-Goosebumps-Horrorland-Video-Game-by-Hephaestus-Books.pdf
    • http://hicsniso.myhome.cx/8e52e56e52e56/The-Scarecrow-Jack-McEvoy-2-Harry-Bosch-Universe-19-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/4e58e59e53e58e54/The-Fifth-Witness-Mickey-Haller-4-Harry-Bosch-Universe-22-by-Michael-Connelly.pdf
    • http://hicsniso.myhome.cx/8e53e55e55e55/The-Closers-Harry-Bosch-11-H

Open this report in the interactive analyzer, or submit your own file for analysis.