Malicious PDF — malware analysis report

Static analysis result for SHA-256 fdd1d57900c090f3…

MALICIOUS

PDF

15.9 KB Created: 2019-11-07 22:46:23 +00:00 Authoring application: mPDF 5.7
MD5: e1f043c0f8e0b985c86d2a1fab936f9d SHA-1: 1ee51491bd2495c766beb623cb2547c4385adbb6 SHA-256: fdd1d57900c090f327c46d7dc034f36d568321134df50271ecdc9ec52e56b091
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF document was flagged by a machine learning classifier as malicious. It contains a large number of embedded URLs, identified as a link farm, which is a common technique for distributing malware or phishing content. The URLs themselves appear to be benign, but their sheer quantity and the heuristic firing suggest a malicious intent to redirect users. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9800

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/8736737734736739/Alma-Kr-nika-ver-Yggdrasil-1-by-Ulrika-Fjellborg.pdf
    • http://cefasfese.4pu.com/6731732730735735/Alma-the-life-and-art-of-Alma-Duncan-1917-2004-Alma-la-vie-et-l-oeuvre-d-Alma-Duncan-1917-2004-by-Tom-McSorley-Anne-Maheux-Jaclyn-Meloche-Catherine-Sinclair-Rosemarie-L-Tovell.pdf
    • http://cefasfese.4pu.com/1730737738739733731/Ausgel-scht-by-Nika-Nanashii.pdf
    • http://cefasfese.4pu.com/4737730738739730/Echoes-of-Old-Souls-by-Nika-Harper.pdf
    • http://cefasfese.4pu.com/6735731734731731/Forbidden-Fruit-by-Nika-Michelle.pdf
    • http://cefasfese.4pu.com/3734737730737734/Baggage-Claim-by-Nika-Yaya.pdf
    • http://cefasfese.4pu.com/7734731737736737/The-Cali-Boss-I-Fell-For-by-D-Nika.pdf
    • http://cefasfese.4pu.com/2739739737731731/Omega-Outfoxed-by-Nika-Lucas.pdf
    • http://cefasfese.4pu.com/1730734736734736732/Wortschatz-ben-by-Nika-Ragua.pdf
    • http://cefasfese.4pu.com/9735732738733733/Seele-in-Flammen-by-Nika-Hemoger.pdf
    • http://cefasfese.4pu.com/6735731734737733/Forbidden-Fruit-2-by-Nika-Michelle.pdf
    • http://cefasfese.4pu.com/8736737733738734/Yggdrasil-by-ScherzoVivace.pdf
    • http://cefasfese.4pu.com/6735731736730733/Forbidden-Fruit-3-The-Juice-by-Nika-Michelle.pdf
    • http://cefasfese.4pu.com/9735731730731732/Reawakening-Oath-Nika-series-2-by-K-D-Nelson.pdf
    • http://cefasfese.4pu.com/8736737733732738/Yggdrasil-Volume-2-by-Lay-Mutsuki.pdf
    • http://cefasfese.4pu.com/5733737734731731/Bout-That-Life-Diablo-s-Story-by-Nika-Michelle.pdf
    • http://cefasfese.4pu.com/6733736739738731/Femininity-Image-in-Popular-Media-by-Fumic-Nika.pdf
    • http://cefasfese.4pu.com/8736737733739730/Yggdrasil-The-World-Tree-by-C-E-Smith.pdf
    • http://cefasfese.4pu.com/8736737734738731/Yggdrasil-Book-1-Lay-of-Runes-1-3-by-M-L-Larson.pdf
    • http://cefasfese.4pu.com/8736737733731738/Leaves-of-Yggdrasil-by-Freya-Aswynn.pdf
    • http://cefasfese.4pu.com/2739739737731731/Omega-Outfoxe

Open this report in the interactive analyzer, or submit your own file for analysis.