Malicious PDF — malware analysis report

Static analysis result for SHA-256 f7e0ab383544ccec…

MALICIOUS

PDF

16.4 KB Created: 2019-05-02 05:12:11 +01:00 Authoring application: mPDF 5.7 First seen: 2020-12-25
MD5: 375bcb114aef8cbde902e22416b8ab8e SHA-1: 696731f6088d7d372df242258c645165f6246745 SHA-256: f7e0ab383544ccecab1975aba8491d5e52cef18bcaff7535af573bd7b24d453b
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, forming a link farm. These URLs, while appearing to link to book downloads, are likely part of a SEO poisoning or phishing scheme to drive traffic to malicious sites. The ML classifier also flagged this PDF as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9358

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/2737735736738733/Buddha-in-Blue-Jeans-An-Extremely-Short-Simple-Zen-Guide-to-Sitting-Quietly-and-Being-Buddha-by-Tai-Sheridan.pdf In PDF document text
    • http://cefasfese.4pu.com/2735732731733736/Buddha-Vol-5-Deer-Park-Buddha-5-by-Osamu-Tezuka.pdfIn PDF document text
    • http://cefasfese.4pu.com/2733738739733/Buddha-Vol-4-The-Forest-of-Uruvela-Buddha-4-by-Osamu-Tezuka.pdfIn PDF document text
    • http://cefasfese.4pu.com/5735738736736736/Tiny-Buddha-Simple-Wisdom-for-Life-s-Hard-Questions-by-Lori-Deschene.pdfIn PDF document text
    • http://cefasfese.4pu.com/8734739738738735/Tiny-Buddha-Simple-Wisdom-for-Lifes-Hard-Questions-by-Lori-Deschene.pdfIn PDF document text
    • http://cefasfese.4pu.com/3739731733735737/Guide-to-Dakini-Land-The-Highest-Yoga-Tantra-Practice-of-Buddha-Vajrayogini-by-Geshe-Kelsang-Gyatso.pdfIn PDF document text
    • http://cefasfese.4pu.com/4737738738738/Buddha-by-Demi.pdfIn PDF document text
    • http://cefasfese.4pu.com/4731734733736/Buddha-Boy-by-Kathe-Koja.pdfIn PDF document text
    • http://cefasfese.4pu.com/4738737731731730/Buddha-Boy-by-Kathe-Koja.pdfIn PDF document text
    • http://cefasfese.4pu.com/9735735736730730/The-Vision-of-the-Buddha-by-Tom-Lowenstein.pdfIn PDF document text
    • http://cefasfese.4pu.com/4739734732738733/Life-of-the-Buddha-by-A-vagho-a.pdfIn PDF document text
    • http://cefasfese.4pu.com/5736737731730732/The-Buddha-in-Jail-by-Cuong-Lu.pdfIn PDF document text
    • http://cefasfese.4pu.com/2732739731730/The-Buddha-Next-Door-by-Zan-Gaudioso.pdfIn PDF document text
    • http://cefasfese.4pu.com/3739731735734739/Why-God-Became-a-Buddha-by-Metteyya-Brahmana.pdfIn PDF document text
    • http://cefasfese.4pu.com/1737739738734739/The-Fortunate-Buddha-by-Heather-Long.pdfIn PDF document text
    • http://cefasfese.4pu.com/3736738735736736/Buddha-Baby-by-Kim-Wong-Keltner.pdfIn PDF document text
    • http://cefasfese.4pu.com/5733733736737/Buddha-s-Warriors-by-Mikel-Dunham.pdfIn PDF document text
    • http://cefasfese.4pu.com/2735732731733738/Buddha-Vol-6-Ananda-by-Osamu-Tezuka.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731736733734737733/Little-Buddha---Wisdom-from-within-by-Ihren-Abrahamsson.pdfIn PDF document text
    • http://cefasfese.4pu.com/1731734739738735734/Buddha-vs-Bonobo-by-Brendan-Walsh.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.