Malicious PDF — malware analysis report

Static analysis result for SHA-256 fdd01983ebda8163…

MALICIOUS

PDF

20.7 KB Created: 2019-05-06 16:53:47 +01:00 Authoring application: mPDF 5.7
MD5: 736a192f8617e6cb8ba6baae5dba90c8 SHA-1: 90cc536727855cdf644fa95e001a0a0a7c84eda3 SHA-256: fdd01983ebda8163014964c53439e59bcc68e77996f7e90f0d62fe5c152c0669
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDF documents, hosted on a dynamic DNS domain. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier strongly supports the malicious verdict.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://unieoooq
    • http://unieoooq.linkpc.net/24e94e24e64e44e3/Five-More-Golden-Rules-Knots-Codes-Chaos-and-Other-Great-Theories-of-20th-Century-Mathematics-by-John-L-Casti.pdf
    • http://unieoooq.linkpc.net/34e84e54e34e24e3/Remembering-War-The-Great-War-between-Memory-and-History-in-the-20th-Century-by-Jay-Murray-Winter.pdf
    • http://unieoooq.linkpc.net/74e24e24e34e84e1/Great-Tapestries-The-Web-of-History-from-12th-To-the-20th-Century-by-Edita-Lausanne.pdf
    • http://unieoooq.linkpc.net/44e44e84e34e54e4/The-Discoveries-Great-Breakthroughs-in-20th-Century-Science-Including-the-Original-Papers-by-Alan-Lightman.pdf
    • http://unieoooq.linkpc.net/84e44e14e84e34e7/1960s-Images-From-the-20th-Century-Images-of-the-20th-Century---Getty-Images-by-Nick-Yapp.pdf
    • http://unieoooq.linkpc.net/24e34e94e34e14e6/Naoki-Urasawa-s-20th-Century-Boys-Volume-01-Friends-20th-Century-Boys-1-by-Naoki-Urasawa.pdf
    • http://unieoooq.linkpc.net/34e84e64e54e44e3/Chaos-Theories-by-Stephen-H-Banks.pdf
    • http://unieoooq.linkpc.net/34e94e14e04e44e6/The-Baseball-Codes-Beanballs-Sign-Stealing-and-Bench-Clearing-Brawls-The-Unwritten-Rules-of-America-s-Pastime-by-Jason-Turbow.pdf
    • http://unieoooq.linkpc.net/24e94e74e44e74e3/Is-Heathcliff-a-Murderer-Great-Puzzles-in-Nineteenth-Century-Fiction-by-John-Sutherland.pdf
    • http://unieoooq.linkpc.net/84e44e14e74e84e9/20th-Century-by-Sam-Sullivan.pdf
    • http://unieoooq.linkpc.net/94e74e84e74e64e6/Would-Be-Worlds-How-Simulation-Is-Changing-the-Frontiers-of-Science-by-John-L-Casti.pdf
    • http://unieoooq.linkpc.net/84e74e14e74e44e5/Blue-Laws-and-Black-Codes-Conflict-Courts-and-Change-in-Twentieth-Century-Virginia-by-Peter-Wallenstein.pdf
    • http://unieoooq.linkpc.net/24e94e24e54e54e4/Mathematics-The-New-Golden-Age-by-Keith-J-Devlin.pdf
    • http://unieoooq.linkpc.net/24e94e24e54e94e8/Paradigms-Lost-Tackling-the-Unanswered-Mysteries-of-Modern-Science-by-John-L-Casti.pdf
    • http://unieoooq.linkpc.net/24e74e44e04e3/Orphans-of-Chaos-Chronicles-of-Chaos-1-by-John-C-Wright.pdf
    • http://unieoooq.linkpc.net/54e44e24e54e9/Fugitives-of-Chaos-Chronicles-of-Chaos-2-by-John-C-Wright.pdf
    • http://unieoooq.linkpc.net/84e44e14e84e94e3/1940s-Decades-of-the-20th-Century-by-Nick-Yapp.pdf
    • http://unieoooq.linkpc.net/84e44e14e84e34e2/The-Waves-20th-Century-Fiction-by-Virginia-Woolf.pdf
    • http://unieoooq.linkpc.net/84e44e14e74e84e1/Modern-Women-20th-Century-4-by-Ruth-Harris.pdf
    • http://unieoooq.linkpc.net/84e44e14e74e84e7/A-Suitable-Boy--20th-century-edition-by-Vikram-Seth.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.