Malicious PDF — malware analysis report

Static analysis result for SHA-256 feeff04027f8d679…

MALICIOUS

PDF

13.0 KB Created: 2020-03-18 21:08:00 +00:00 Authoring application: mPDF 5.7
MD5: 33ceb6788620c65490b1023b556638be SHA-1: 4a0e9993144478cf59623d0da2d6134877f2ef96 SHA-256: feeff04027f8d67980cbd6fb2623fac7ec51a8c24ef802e745d40716534bee85
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF contains a large number of embedded URLs pointing to external PDF files hosted on the domain kitasdyu.myhome.cx. This is indicative of a link farm or a distribution point for malicious content. The ML classifier also flagged this PDF as malicious. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9006

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://kitasdyu.myhome.cx/1871876875871872/Dire-Blood-Descent-5-by-S-M-Reine.pdf
    • http://kitasdyu.myhome.cx/1871876875876875/Paradise-Damned-Descent-7-by-S-M-Reine.pdf
    • http://kitasdyu.myhome.cx/9875870877870871/Death-s-Avatar-Descent-0-5-by-S-M-Reine.pdf
    • http://kitasdyu.myhome.cx/1872875870878877/Oaths-of-Blood-Ascension-2-by-S-M-Reine.pdf
    • http://kitasdyu.myhome.cx/8871874879873877/The-Dire-Wolf-Who-Stole-My-Heart-Dire-Pack-Reborn-1-by-Stephani-Hecht.pdf
    • http://kitasdyu.myhome.cx/1873875873878875/Blood-Moon-Harvest-Seasons-of-the-Moon-Cain-Chronicles-2-by-S-M-Reine.pdf
    • http://kitasdyu.myhome.cx/1878871877870875/Nine-By-Night-by-S-M-Reine.pdf
    • http://kitasdyu.myhome.cx/3870874871872879/Shifters-After-Dark-by-S-M-Reine.pdf
    • http://kitasdyu.myhome.cx/8871874879877872/The-Last-Dire-Wolf-Bloodlines-1-by-Kelex.pdf
    • http://kitasdyu.myhome.cx/2871876878878873/Mai-dire-amore-by-Mercy-Molinari.pdf
    • http://kitasdyu.myhome.cx/2875873876874878/Dire-Means-by-Geoffrey-Neil.pdf
    • http://kitasdyu.myhome.cx/1872879873875877/Lost-in-Prophecy-Ascension-5-by-S-M-Reine.pdf
    • http://kitasdyu.myhome.cx/1871879876874876/Sacrificed-in-Shadow-Ascension-1-by-S-M-Reine.pdf
    • http://kitasdyu.myhome.cx/6875871879877870/Oedipe-reine-by-Marcela-Iacub.pdf
    • http://kitasdyu.myhome.cx/2878876872871/Dire-Straits-Bo-Blackman-1-by-Helen-Harper.pdf
    • http://kitasdyu.myhome.cx/8871875870875875/Seeking-the-She-Wolf-Anything-for-the-Alpha-1-by-Natalia-Dire.pdf
    • http://kitasdyu.myhome.cx/3873875871875875/On-an-Island-with-Consequences-Dire-by-Kelly-Ana-Morey.pdf
    • http://kitasdyu.myhome.cx/8871874879876879/The-Dire-Wolves-Chronicles-by-Alyssa-Rose-Ivy.pdf
    • http://kitasdyu.myhome.cx/8871874879876878/The-Partners-Dire-Calls-1-4-by-Mathew-Reuther.pdf
    • http://kitasdyu.myhome.cx/8870875879871874/La-Reine-des-Neiges-by-Walt-Disney-Company.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.