Malicious PDF — malware analysis report

Static analysis result for SHA-256 f788687a55280f57…

MALICIOUS

PDF

16.9 KB Created: 2019-05-06 16:59:27 +01:00 Authoring application: mPDF 5.7
MD5: 6c33d83207f5f6fe363b4f7f82a1c3ff SHA-1: 761f2841046944f4accd98e48cf94d340a22379b SHA-256: f788687a55280f57368e349fe6c9bead62535cd1ba0f0862ca7e03a6c86253fa
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded URLs, constituting a link farm. This is indicated by the PDF_SEO_LINK_FARM heuristic firing. The ML classifier also flagged the PDF as malicious with high confidence. The embedded URLs, while individually marked as benign, collectively serve as a lure to a large collection of external PDF documents, suggesting a social engineering tactic to drive traffic or distribute further content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/9a04a06a01a09a06/Battle-Royale---Perfect-Edition-T03-by-TAKAMI-KOUSHUN.pdf
    • http://muicuiu.dumb1.com/9a04a06a01a09a03/Battle-Royale---Perfect-Edition-T02-by-TAKAMI-KOUSHUN.pdf
    • http://muicuiu.dumb1.com/6a08a07a07a05a07/Battle-Royale-Vol-04-Battle-Royale-4-by-Koushun-Takami.pdf
    • http://muicuiu.dumb1.com/3a03a06a07a07a04/Battle-Royale-Vol-11-Battle-Royale-11-by-Koushun-Takami.pdf
    • http://muicuiu.dumb1.com/6a08a07a07a05a06/Battle-Royale-Vol-05-Battle-Royale-5-by-Koushun-Takami.pdf
    • http://muicuiu.dumb1.com/6a08a07a07a05a05/Battle-Royale-Vol-03-Battle-Royale-3-by-Koushun-Takami.pdf
    • http://muicuiu.dumb1.com/6a08a07a07a06a00/Battle-Royale-Vol-08-Battle-Royale-8-by-Koushun-Takami.pdf
    • http://muicuiu.dumb1.com/6a08a07a07a05a09/Battle-Royale-Vol-06-Battle-Royale-6-by-Koushun-Takami.pdf
    • http://muicuiu.dumb1.com/9a08a01a08a08a06/The-Angel-Chronicles-2nd-Edition-Volume-1-The-Battle-for-Heaven-The-Angels-Chronicles-2nd-Edition-by-Lanze-Thompson.pdf
    • http://muicuiu.dumb1.com/7a07a04a01a04a06/Fruits-Basket-Ultimate-Edition-Volume-7-by-Natsuki-Takaya.pdf
    • http://muicuiu.dumb1.com/8a05a01a08a00a08/Battle-Royale-The-Last-Stand-by-Stella-Furuya.pdf
    • http://muicuiu.dumb1.com/1a00a08a04a06a03a04/Ultimate-Spider-Man-Volume-9-Ultimate-Six-by-Brian-Michael-Bendis.pdf
    • http://muicuiu.dumb1.com/3a08a03a07a06a07/The-Ultimate-Battle-Okinawa-1945-The-Last-Epic-Struggle-of-World-War-II-by-Bill-Sloan.pdf
    • http://muicuiu.dumb1.com/6a02a06a03a07a00/Beowulf-Ultimate-Edition-by-Unknown.pdf
    • http://muicuiu.dumb1.com/2a04a00a04a05a04/Halloween-IV-The-Ultimate-Edition-by-Nicholas-Grabowsky.pdf
    • http://muicuiu.dumb1.com/3a01a02a02a00a00/An-Exaltation-of-Larks-The-Ultimate-Edition-by-James-Lipton.pdf
    • http://muicuiu.dumb1.com/5a08a07a08a02a05/Fruits-Basket-Ultimate-Edition-Vol-6-by-Natsuki-Takaya.pdf
    • http://muicuiu.dumb1.com/5a08a07a07a09a05/Fruits-Basket-Ultimate-Edition-Vol-4-by-Natsuki-Takaya.pdf
    • http://muicuiu.dumb1.com/6a08a04a02a07a08/Ultimate-Spider-Man-Collected-Edition-by-Brian-Michael-Bendis.pdf
    • http://muicuiu.dumb1.com/5a03a03a01a01a08/Ultimate-Comics-Avengers-Next-Generation-Premiere-Edition-by-Mark-Millar.pdf
    • http://muicuiu.dumb1.com/7a07a04a01a0

Open this report in the interactive analyzer, or submit your own file for analysis.