PDF malware analysis — malicious · f6b8026301739990

MALICIOUS

PDF

85.2 KB Created: 2021-07-31 05:41:07 +03:00 Authoring application: wkhtmltopdf 0.12.5 (via Qt 5.11.3) First seen: 2021-10-01

MD5: 832824d5f87ae9ff39c723033b55c93f SHA-1: 5bd89dbf7d7c05bbbf5c4bfe13068ddd2fed3255 SHA-256: f6b80263017399900205bd84036844509ee90abe6f3f7c88b735af3ab191450e

94 Risk Score

Malware Insights

MITRE ATT&CK

T1566.001 Spearphishing Attachment

This PDF document was flagged as malicious by ClamAV and an ML classifier. The file embeds external URLs that direct users to attacker-controlled resources. Specific URLs and indicators for this sample are listed in the indicators section.

Machine Learning

Nyx PDF Classifier malicious score 0.6725

Heuristics 3

ClamAV: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0 critical CLAMAV_DETECTION

ClamAV detected this file as malware: Pdf.Phishing.Trojan-d2568dad23a94d95-d2568dad23a94d95-10044375-0
External URI info PDF_URI

PDF contains an external URL action
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL https://irlanc.ru/uplcv?utm_term=angelica+zambrano+testimony+tagalog+version PDF link annotation
- https://tapetcenter.ro/app/webroot/files/userfiles/files/widatabofuvabafidura.pdfIn PDF document text
- http://poltinka.ru/userfiles/file/nobosuwipelas.pdfIn PDF document text
- https://lordoptika.hu/files/files/fexokivujivedewenamifade.pdfIn PDF document text
- http://4bx.pl/public/file/gigike.pdfIn PDF document text
- http://baschin-heizung.com/meineBilderAlbertGrundschule/file/19235058053.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.

PDF

Malware Insights

Machine Learning

Heuristics 3

Related samples 3