Malicious PDF — malware analysis report

Static analysis result for SHA-256 fa333dcee3e603a8…

MALICIOUS

PDF

27.9 KB Created: 2019-04-30 19:28:37 +01:00 Authoring application: mPDF 5.7
MD5: a93ff77ab14a573d16d5c8b118973de9 SHA-1: e84501bb8cfefb20934a0fed3897822c3f6c124c SHA-256: fa333dcee3e603a858778febf13b2a856959bd254d732f4e2c8008abb57dd63e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of external links, identified by the PDF_SEO_LINK_FARM heuristic. While the document body is heavily obfuscated, the presence of numerous links suggests a malicious intent, possibly for SEO manipulation or to redirect users to harmful sites. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9695

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/4732730731738732/The-Complete-Works-of-Jane-Austen-All-Novels-Short-Stories-Unfinished-Works-Juvenilia-Letters-Poems-Prayers-Memoirs-and-Biographies---Fully-Illustrated-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/3732737739730730/Jane-Austen-Complete-Novels-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/3736730738734736/Jane-Austen-Her-Complete-Novels-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/1731737736739733731/The-Complete-Works-of-Jane-Austen-In-One-Volume-Sense-and-Sensibility-Pride-and-Prejudice-Mansfield-Park-Emma-Northanger-Abbey-Persuasion-Lady-Sandition-and-the-Complete-Juvenilia-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/1731737736739738737/Jane-Austen-Collection-Emma-Mansfield-Park-Northanger-Abbey-Biography-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/6734739732733738/Emma-by-Jane-Austen-a-Novel-about-Youthful-Hubris-and-the-Perils-of-Misconstrued-Romance-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/8736733730734734/Die-Jane-Austen-Collection-Gesamtausgabe-Stolz-und-Vorurteil-Verstand-und-Gef-hl-Emma-berredung-Mansfield-Park-Die-Abtei-von-Northanger-IDP-Classics-German-Edition-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/8736734739733/Confessions-of-a-Jane-Austen-Addict-Jane-Austen-Addict-1-by-Laurie-Viera-Rigler.pdf
    • http://cefasfese.4pu.com/1731737737730739736/NORTHANGER-ABBEY-By-Jane-Austen-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/8730733738730735/Mansfield-Park-by-Jane-Austen-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/1731731739738736732/Northanger-Abbey-by-Jane-Austen-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/3738739735731732/The-Three-Colonels-Jane-Austen-s-Fighting-Men-Jane-Austen-s-Fighting-Men-1-by-Jack-Caldwell.pdf
    • http://cefasfese.4pu.com/1730739735738738738/Strandlekt-re-Mein-Austen-Bront-Lesebuch-Die-besten-Werke-in-einem-Band-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/2735732738731732/Dinner-with-Mr-Darcy-Recipes-inspired-by-the-novels-of-Jane-Austen-by-Pen-Vogler.pdf
    • http://cefasfese.4pu.com/4737739731731731/Old-Friends-And-New-Fancies-An-Imaginary-Sequel-To-The-Novels-Of-Jane-Austen-by-Sybil-G-Brinton.pdf
    • http://cefasfese.4pu.com/7731734730737735/Mansfield-Park-Complete-amp-Unabridged-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/5734733732736739/Persuasion-by-Jane-Austen-1818-Original-Version-Persuasion-by-Jane-Austen-1818-Original-Version-Volume-1-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/3738739734733733/A-Jane-Austen-Education-How-Six-Novels-Taught-Me-About-Love-Friendship-and-the-Things-That-Really-Matter-by-William-Deresiewicz.pdf
    • http://cefasfese.4pu.com/2736734732737739/Jane-Austen-s-Letters-by-Jane-Austen.pdf
    • http://cefasfese.4pu.com/2736734738735732/Jane-and-the-Unpleasantness-at-Scargrave-Manor-Jane-Austen-Mysteries-1-by-Stephanie-Barron.pdf
    • http://cefasfese.4pu.com/1731737736739733731/The-Complete-Works-of-Jane-Austen-In-One-Volume-Sense-and-Sensibility-Pride-and-Prejudice-Mansfield-Park-Emma-Northanger-Abbey-Persuasion-Lady-Sa

Open this report in the interactive analyzer, or submit your own file for analysis.