Malicious PDF — malware analysis report

Static analysis result for SHA-256 f5c3afc02eb4316d…

MALICIOUS

PDF

34.2 KB Created: 2019-04-30 02:35:05 +01:00 Authoring application: mPDF 5.7
MD5: 99f5d821e65434dc28d7360f6f080107 SHA-1: 54f7b7dbd2e5760af9fe13aac6ec8ec7c41a5e95 SHA-256: f5c3afc02eb4316d4547d8572f239eb878e3ef9b0872f49f59f2a2b20c921908
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic, which suggests an attempt to manipulate search engine results or drive traffic to external sites. The ML_NYX_PDF_MALICIOUS heuristic further supports the malicious nature of the file. While no scripts were extracted, the sheer volume of links and the ML classification indicate a high likelihood of malicious intent, possibly related to SEO spam or a traffic-driving scheme.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9878

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/1208205201208206/Betsy-Bird-Learns-To-Fly-Free-audio-book-included-Children-s-bedtime-rhyming-picture-story-book-Preschool-book-for-kids-ages-2-4-by-Christina-McDonald.pdf
    • http://xiixmcuin.linkpc.net/3201202203208204/Pirates-Don-t-Knit-Children-s-Book-Funny-Rhyming-Bedtime-Story---Picture-Book-Beginner-Reader-About-Being-Yourself-Ages-3-7-Top-of-the-Wardrobe-Gang-Picture-by-Melinda-Kinsman.pdf
    • http://xiixmcuin.linkpc.net/1201209205202202204/Children-s-Book-Kate-Gets-Dressed-with-Dressy-Fairy-Great-Bedtime-Story-for-Kids-Age-4---8-Educational-Book-by-Shulamit-Zilberberg.pdf
    • http://xiixmcuin.linkpc.net/1208205200204206/Spark---A-Bedtime-Rhyming-Picture-Book-by-Mark-Smith.pdf
    • http://xiixmcuin.linkpc.net/4203205200207203/Books-for-Children---My-Best-Unicorn-Good-Dream-Story-2-Free-Kids-Books-Beginning-Reader-Bedtime-Stories-For-Kids-Ages-3-8-children-s-books-by-Aurora-Higgins.pdf
    • http://xiixmcuin.linkpc.net/3201202207207201/Books-for-Kids-Super-Ants-Illustration-Book-kids-books-Ages-3-8-Bedtime-Stories-For-Kids-Children-s-Books-beginner-reader-books-Bugs-amp-Spiders-1-by-Robot-J-.pdf
    • http://xiixmcuin.linkpc.net/9207204207208208/The-Missing-Smartphone-Mystery-Book-for-Kids-Ages-6-8-9-12-Free-Stories-Bedtime-Stories-Zooey-amp-Caleb-6th-Grade-Detectives-by-R-K-Davenport.pdf
    • http://xiixmcuin.linkpc.net/9207204207208203/The-Missing-Hamster-Mystery-Book-for-Kids-Ages-6-8-9-12-Free-Stories-Bedtime-Stories-Zooey-amp-Caleb-6th-Grade-Detectives-by-R-K-Davenport.pdf
    • http://xiixmcuin.linkpc.net/3201202203208202/Books-for-Kids-Tommy-Tiger-Becomes-a-Firefighter-Illustration-Book-Ages-3-8-Short-Stories-for-Kids-Kids-Books-Bedtime-Stories-For-Kids-Children-Books-Early-Readers-by-Tommy-Tiger.pdf
    • http://xiixmcuin.linkpc.net/8202203201202207/The-jungle-book-Illustrated-More-Than-37-Pictures-Included-Free-Audio-Links-by-Rudyard-Kipling.pdf
    • http://xiixmcuin.linkpc.net/3201201209208204/Children-book-One-Two-Family-Illustrated-picture-book-for-kids-about-single-mother-family-by-Michal-Keidar.pdf
    • http://xiixmcuin.linkpc.net/6202202208205206/Children-s-Book-Jumbo-value-tales-bedtime-story-kid-s-short-story-collection-by-Tammy-Brown-Elkeles.pdf
    • http://xiixmcuin.linkpc.net/7207206201205200/Children-s-books-The-Three-Noble-Sheep-and-a-very-bad-Fox-Illustrated-Picture-Book-Plus-a-Free-Gift-by-Doctor-Tomi.pdf
    • http://xiixmcuin.linkpc.net/6202202207208204/Children-s-Book-Fish-Also-Go-To-Heaven-value-tales-bedtime-story-kid-s-short-story-collection-by-Tammy-Brown-Elkeles.pdf
    • http://xiixmcuin.linkpc.net/9207207205206205/Soccer-For-Kids-Discover-the-Incredible-History-Fantastic-Facts-and-Amazing-Photos-of-the-World-s-Most-Popular-Sport-A-Children-s-Sport-Book-for-Ages-6-to-10-Soccer-Books-for-Kids-by-Lexington-Nabb.pdf
    • http://xiixmcuin.linkpc.net/3201203206203208/Early-Reading-Challenge-2-15-Books-in-1-Bedtime-story-Adventure-Animal-stories-Teach-Values-Book-Funny-free-story-prime-Rhymes-Fantasy-Education-by-Betty-J-Byers.pdf
    • http://xiixmcuin.linkpc.net/1200204205204202205/The-Crazy-Cave-Man-Alphabet-A-Rhyming-ABC-Book-for-Kids-by-Julie-Sonnen.pdf
    • http://xiixmcuin.linkpc.net/3207206208200204/11x-Magic-A-Children-s-Picture-Book-That-Makes-Math-Fun-with-a-Cartoon-Rhymimg-Format-to-Help-Kids-See-How-Magical-11x-Math-Can-Be-by-Sharon-Clark.pdf
    • http://xiixmcuin.linkpc.net/3201203204203206/Sugar-Twin-Children-s-Pet-Animals-Bedtime-Story-kittens-cats-emotional-feel-good-book-by-Betty-J-Byers.pdf
    • http://xiixmcuin.linkpc.net/9203207207203204/This-Really-is-a-Picture-Book-Part-3-The-Picture-Book-Series-1-by-Kathleen-Odenthal.pdf
    • http://xiixmcuin.linkpc.net/1208205200204206/Spark---A-Bedtime-Rhyming-Picture-Book-by

Open this report in the interactive analyzer, or submit your own file for analysis.