Malicious PDF — malware analysis report

Static analysis result for SHA-256 fac2e5af32c06219…

MALICIOUS

PDF

17.6 KB Created: 2019-04-30 08:51:10 +01:00 Authoring application: mPDF 5.7
MD5: 3b7b15c7e890ed2d3f6aefdb05fa4624 SHA-1: a3c830196c56ee8379d0670da1ac119ee06f0019 SHA-256: fac2e5af32c0621926ec98856d1a54447533a09c474ef0f0b8e74b4d45f142e3
62 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The file is identified as a malicious PDF dropper by ClamAV. The document body contains multiple embedded URLs that appear to be disguised as book titles, likely to trick users into clicking them. These URLs are the primary indicators of compromise, suggesting the PDF's purpose is to redirect users to malicious content or download further malware. No scripts were extracted from this sample.

Heuristics 3

  • ClamAV: Pdf.Dropper.Agent-7205047-0 critical CLAMAV_DETECTION
    ClamAV detected this file as malware: Pdf.Dropper.Agent-7205047-0
  • External URI info PDF_URI
    PDF contains an external URL action
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://seasasac.lflinkup
    • http://seasasac.lflinkup.com/1da5da3da9da5da0/Napoleon-The-Sun-of-Austerlitz-Napoleon-2-by-Max-Gallo.pdf
    • http://seasasac.lflinkup.com/1da5da3da8da2da5/Napoleon-The-Emperor-of-Kings-Napoleon-3-by-Max-Gallo.pdf
    • http://seasasac.lflinkup.com/1da0da8da8da8da4da3/Kritische-Beitr-ge-Zu-Napoleon-s-Feldz-gen-Nochmals-Napoleon-sche-Und-Moltke-sche-Strategie-St-rken-Und-Verluste-in-Napoleon-schen-Feldz-gen-Nochmals-Aspern-Und-Wagram-by-Karl-Bleibtreu.pdf
    • http://seasasac.lflinkup.com/8da4da3da0da4da8/The-Law-of-Success-Volume-XII-amp-XIII-Concentration-amp-Co-Operation-by-Napoleon-Hill-by-Napoleon-Hill.pdf
    • http://seasasac.lflinkup.com/1da0da4da1da8da9da0/Think-and-Grow-Rich-by-Napoleon-Hill-with-Linked-Table-of-Contents-by-Napoleon-Hill.pdf
    • http://seasasac.lflinkup.com/7da7da4da0da4da7/Think-amp-Grow-Rich---Lectures-by-Napoleon-Hill-MP3-by-Napoleon-Hill.pdf
    • http://seasasac.lflinkup.com/1da0da3da9da9da7da8/Napoleon-by-J-Christopher-Herold.pdf
    • http://seasasac.lflinkup.com/4da2da9da2da6/Law-of-Success-by-Napoleon-Hill.pdf
    • http://seasasac.lflinkup.com/3da4da9da7da9da2/Napoleon-on-War-by-Bruno-Colson.pdf
    • http://seasasac.lflinkup.com/5da3da9da0da7da9/Napoleon-by-Georges-Lefebvre.pdf
    • http://seasasac.lflinkup.com/6da0da8da2da2da3/Napoleon-Bonaparte-by-Alan-Schom.pdf
    • http://seasasac.lflinkup.com/3da8da5da3da7da2/The-Age-of-Napoleon-The-Story-of-Civilization-11-by-Will-Durant.pdf
    • http://seasasac.lflinkup.com/1da9da2da6da6da5/Napoleon-in-Egypt-by-Paul-Strathern.pdf
    • http://seasasac.lflinkup.com/3da1da7da0da8da4/Think-and-Grow-Rich-by-Napoleon-Hill.pdf
    • http://seasasac.lflinkup.com/5da5da5da4da9da2/Eugenie-and-Napoleon-III-by-David-Duff.pdf
    • http://seasasac.lflinkup.com/5da4da1da3da2da0/France-Under-Napoleon-by-Louis-Bergeron.pdf
    • http://seasasac.lflinkup.com/5da5da5da4da7da3/Clisson-and-Eug-nie-by-Napol-on-Bonaparte.pdf
    • http://seasasac.lflinkup.com/5da0da6da9da9da5/The-Wars-of-Napoleon-by-Charles-Esdaile.pdf
    • http://seasasac.lflinkup.com/3da6da7da6da2da3/Napoleon-in-America-by-Shannon-Selin.pdf
    • http://seasasac.lflinkup.com/6da2da3da9da1da3/Napoleon-Bonaparte-by-Albert-Z-Manfred.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.