Malicious PDF — malware analysis report

Static analysis result for SHA-256 fe45a34728f44e7b…

MALICIOUS

PDF

24.9 KB Created: 2019-05-02 01:43:50 +01:00 Authoring application: mPDF 5.7
MD5: 015a74ff4b3ad857a2772a5f704b762e SHA-1: 3213c826bbff3e26245a188192720f852a286934 SHA-256: fe45a34728f44e7bb402f02129e4b9480eda3a7386ac5d22dc28d531f7e1c55d
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files hosted on the domain 'muicuiu.dumb1.com'. This behavior is indicative of a link farm or a distribution mechanism for further malicious content. The ML classifier also flagged this PDF with high confidence. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9910

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://muicuiu.dumb1.com/1a00a02a05a05a01a00/The-WWI-Journals-of-A-G-Franke-by-Don-Franke.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a05a01a02/Ivana-Franke-Retreat-Into-Darkness-by-Ivana-Franke.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a04a00a01/FR-NKE-by-J-K-Wildling.pdf
    • http://muicuiu.dumb1.com/9a01a00a05a09a02/Friedrichs-Sanssouci-und-andere-Schlossgeschichten-by-Lars-Franke.pdf
    • http://muicuiu.dumb1.com/9a09a04a02a02a04/Sherlock-Holmes-und-die-schwarze-Kobra-by-Franziska-Franke.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a04a09a08/Wedlocked-The-Perils-of-Marriage-Equality-by-Katherine-Franke.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a05a00a05/Manifold-Witness-The-Plurality-of-Truth-by-John-R-Franke.pdf
    • http://muicuiu.dumb1.com/4a00a05a05a08a07/The-Savior-Project---The-Chosen-One-Book-1-by-Fritz-Franke.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a07a08a01/Feminismen-heute-Positionen-in-Theorie-und-Praxis-by-Yvonne-Franke.pdf
    • http://muicuiu.dumb1.com/2a02a09a04a07a06/To-Save-the-Wild-Bison-Life-on-the-Edge-in-Yellowstone-by-Mary-Ann-Franke.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a04a00a04/Aristotle-and-Atlantis---What-did-the-philosopher-really-think-about-Plato-s-island-empire-by-Thorwald-C-Franke.pdf
    • http://muicuiu.dumb1.com/9a08a00a03a00a06/Problemlosen-in-Gruppen-Veranderungen-Im-Unternehmen-Zielwirksam-Realisieren-by-Heinz-Franke.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a07a01a04/The-Social-Construction-of-Man-the-State-and-War-Identity-Conflict-and-Violence-in-Former-Yugoslavia-by-Franke-Wilmer.pdf
    • http://muicuiu.dumb1.com/1a00a06a01a05a02a08/Posttraumatische-Belastungsstorungen-Durch-Sexuelle-Gewalterfahrungen-in-Der-Kindheit-by-Doris-Franke-Lowin.pdf
    • http://muicuiu.dumb1.com/1a01a09a08a02a07a06/Religionen-nebeneinander-Modelle-religi-oser-Vielfalt-in-Ost--und-S-udostasien-by-Edith-Franke.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a07a00a03/Banned-on-the-Hill-A-True-Story-about-Dirty-Oil-and-Government-Censorship-by-Franke-James.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a06a02a06/Into-the-Woods-A-Different-Scandinavian-Crime-Novel-Detective-Lena-Franke-Series-Book-3-by-Erik-Boman.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a05a00a03/On-What-Cannot-Be-Said-Apophatic-Discourses-in-Philosophy-Religion-Literature-and-the-Arts-Volume-1-Classic-Formulations-by-William-Franke.pdf
    • http://muicuiu.dumb1.com/9a08a05a02a04a00/Beschreibung-Des-Jehol-Gebietes-in-Der-Provinz-Chihli-Detail-Studien-in-Chinesischer-Landes-Und-Volkskunde-Mit-Einer-Karte-Und-Sechzehn-Illustrationen-by-O-Franke.pdf
    • http://muicuiu.dumb1.com/9a08a05a01a07a07/Beschreibung-des-Jehol-gebietes-in-der-provinz-Chihli-detail-studien-in-chinesischer-landes--und-volkskunde-mit-einer-karte-und-sechzehn-illustrationen-by-Otto-Franke.pdf
    • http://muicuiu.dumb1.com/1a00a02a05a04a00a04/Aristotle-and-

Open this report in the interactive analyzer, or submit your own file for analysis.