Malicious PDF — malware analysis report

Static analysis result for SHA-256 fd4812b7a2a4641c…

MALICIOUS

PDF

17.6 KB Created: 2019-04-30 03:57:03 +01:00 Authoring application: mPDF 5.7
MD5: 638c35438722ae009f3b4ce8b459bcf7 SHA-1: 934843866d07e1cef298f122bd73b49ad0ec8127 SHA-256: fd4812b7a2a4641c526b832ccc0777dea274a02dfed9a0a3ddd58d96a3890500
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF file was flagged by a machine learning classifier with high confidence and contains a large number of embedded links. The heuristic 'PDF_SEO_LINK_FARM' indicates that these links likely form a link farm, a common technique used to redirect users to malicious websites or download further malware. While the specific content of the linked PDFs is benign, the sheer volume and structure suggest a malicious intent to abuse search engine optimization or user redirection.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9931

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/5a03a01a06a01a04/Bilingue-fran-ais-anglais-L-trange-histoire-de-Benjamin-Button---The-Curious-Case-of-Benjamin-Button-by-F-Scott-Fitzgerald.pdf
    • http://muicuiu.dumb1.com/6a02a06a08a09a06/The-Curious-Case-of-Benjamin-Button---Kisah-Aneh-Benjamin-Button-by-F-Scott-Fitzgerald.pdf
    • http://muicuiu.dumb1.com/5a06a00a04a08a05/Good-Morning-Irene-Irene-Adler-2-by-Carole-Nelson-Douglas.pdf
    • http://muicuiu.dumb1.com/3a07a02a05a09a04/Goodnight-Irene-The-Collected-Stories-of-Irene-Van-de-Kamp-by-Carol-Lay.pdf
    • http://muicuiu.dumb1.com/1a07a02a09a05a02/Dear-Irene-Irene-Kelly-3-by-Jan-Burke.pdf
    • http://muicuiu.dumb1.com/2a07a01a08a06/Goodnight-Irene-Irene-Kelly-1-by-Jan-Burke.pdf
    • http://muicuiu.dumb1.com/6a09a00a05a07a09/-uvres-de-Ir-ne-N-mirovsky-David-Golder-Le-Bal-J-zabel-Les-Mouches-d-automne-by-Ir-ne-N-mirovsky.pdf
    • http://muicuiu.dumb1.com/4a05a09a00a00a02/Button-Down-by-Anne-Ylvisaker.pdf
    • http://muicuiu.dumb1.com/4a07a02a08a05a07/Panic-Button-by-Frazer-Lee.pdf
    • http://muicuiu.dumb1.com/4a09a00a08a03a04/The-Panic-Button-by-Koom-Kankesan.pdf
    • http://muicuiu.dumb1.com/5a00a08a01a02a06/Don-t-Push-the-Button-by-Bill-Cotter.pdf
    • http://muicuiu.dumb1.com/4a09a01a03a02a08/The-Button-Collector-by-Elizabeth-Jennings.pdf
    • http://muicuiu.dumb1.com/1a01a04a00a06a02/Willow-s-Whispers-by-Lana-Button.pdf
    • http://muicuiu.dumb1.com/1a09a05a04a00a09/Button-Hill-by-Michael-Bradford.pdf
    • http://muicuiu.dumb1.com/2a00a08a09a07a00/The-Curious-Case-of-Benjamin-Button-by-F-Scott-Fitzgerald.pdf
    • http://muicuiu.dumb1.com/4a01a07a07a04/The-Curious-Case-of-Benjamin-Button-by-F-Scott-Fitzgerald.pdf
    • http://muicuiu.dumb1.com/7a00a05a02a06/Button-Finds-Family-and-Friends-at-the-Farm-by-Joyce-Mitchell.pdf
    • http://muicuiu.dumb1.com/7a02a03a02a05a01/The-Disney-Queue-Line-Survival-Guide-by-Kimberly-Button.pdf
    • http://muicuiu.dumb1.com/1a01a03a02a07a07a05/Windows-8-1-Handbook-Return-of-the-Start-Button-by-Kevin-Wilson.pdf
    • http://muicuiu.dumb1.com/3a00a08a01a02a06/Batman-The-Flash-The-Button-Deluxe-Edition-by-Joshua-Williamson.pdf
    • http://muicuiu.dumb1.com/6a09a00a05a07a09/-uvres-de-Ir-

Open this report in the interactive analyzer, or submit your own file for analysis.