Malicious PDF — malware analysis report

Static analysis result for SHA-256 fde7101c6f0b60d7…

MALICIOUS

PDF

16.8 KB Created: 2019-05-02 17:24:58 +01:00 Authoring application: mPDF 5.7
MD5: 0af1a62e3b69dab87745ceadd17877b9 SHA-1: 450d8e15d94edfb8372af4dbb26376a207193ff3 SHA-256: fde7101c6f0b60d7634ade2aee8c4cefd33c6116c66942c7ec19c298900cca6e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded URLs, all pointing to the same domain, suggesting a link farm or redirection scheme. The ML classifier also flagged this PDF as malicious. No scripts were extracted from this sample, and the document body was heavily obfuscated, preventing a deeper analysis of the specific lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9788

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://cefasfese.4pu.com/1732738730730731/Alpha-Divided-Alpha-Girl-3-by-Aileen-Erin.pdf
    • http://cefasfese.4pu.com/4731732732735733/Becoming-Alpha-Alpha-Girl-1-by-Aileen-Erin.pdf
    • http://cefasfese.4pu.com/1738734736732739/The-Alpha-Series-Boxed-Set-Books-1---3-Alpha-Kaden-Alpha-Grayson-and-Alpha-Jasper-by-Midika-Crane.pdf
    • http://cefasfese.4pu.com/3733732738732731/Broken-Planet-Alpha-2-by-Erin-M-Leaf.pdf
    • http://cefasfese.4pu.com/9736732736730739/Alpha-s-War-Bad-Boy-Alphas-7-Bad-Alpha-Dads-by-Renee-Rose.pdf
    • http://cefasfese.4pu.com/2737731736730734/Alpha-Bully-The-Alpha-Shifter-Collection-5-by-Sam-Crescent.pdf
    • http://cefasfese.4pu.com/3732735738732732/The-Alpha-s-Toy-The-Alpha-Shifter-Collection-1-by-Sam-Crescent.pdf
    • http://cefasfese.4pu.com/7735739736730733/Alpha-Initiation-Alpha-Blood-1-by-Mac-Flynn.pdf
    • http://cefasfese.4pu.com/2735735731730735/Alpha-Alpha-1-by-Jasinda-Wilder.pdf
    • http://cefasfese.4pu.com/2739739736738739/Posing-for-the-Alpha-For-the-Alpha-1-by-Sydnee-B-.pdf
    • http://cefasfese.4pu.com/1731731738735739739/Awesomely-Alpha-9-Story-Big-Bundle-of-Interracial-Group-Domination-and-Macho-Hetero-Erotica-Alpha-Male-Hetero-Big-Bundles-Book-2-by-JT-Washington.pdf
    • http://cefasfese.4pu.com/1737736738739732/Alpha-Girl-Wolfling-1-by-Kate-Bloomfield.pdf
    • http://cefasfese.4pu.com/2734732739733739/Kiss-of-a-Wolf-An-Alpha-Girl-Novella-by-Leah-D-W-.pdf
    • http://cefasfese.4pu.com/3736735736731738/Alpha-amp-Omega-Call-of-the-Hunt-Alpha-amp-Omega-0-5-3-by-Patricia-Briggs.pdf
    • http://cefasfese.4pu.com/4738737739737731/True-Alpha-Complete-Box-Set-True-Alpha-1-6-by-Alisa-Woods.pdf
    • http://cefasfese.4pu.com/1737737736737738/Punished-by-the-Alpha-Poutine-Alpha-Poutine-2-by-Twisty-McCox.pdf
    • http://cefasfese.4pu.com/2739734731737736/A-is-for-Alpha-Male-A-is-for-Alpha-Male-1-by-Laurel-Ulen-Curtis.pdf
    • http://cefasfese.4pu.com/4734735730734733/The-Lone-Alpha-Unleashed-A-Big-Girl-Meets-Bad-Wolf-Romance-by-Molly-Prince.pdf
    • http://cefasfese.4pu.com/4736730732733737/Alpha-Fighter---Part-Two-The-Alpha-Fighter-2-by-Ava-Ashley.pdf
    • http://cefasfese.4pu.com/1737737736737739/Alpha-Billionaire-Alpha-Billionaire-1-by-Helen-Cooper.pdf
    • http://cefasfese.4pu.com/273973

Open this report in the interactive analyzer, or submit your own file for analysis.