Malicious PDF — malware analysis report

Static analysis result for SHA-256 00463ee757f7c4cb…

MALICIOUS

PDF

19.8 KB Created: 2019-04-30 04:28:58 +01:00 Authoring application: mPDF 5.7
MD5: 2fa1fc5c4d3a76f8fed7a379c5f7dc76 SHA-1: 4ae18b9a0ebff45078b3edcad5658966da09cf6d SHA-256: 00463ee757f7c4cb9d0c798ad8953915d306889977a1781026c7006add1af4ac
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF document contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. While the URLs themselves are marked as benign, the sheer volume and structure suggest a malicious intent, possibly for SEO manipulation or to distribute further malware. The ML_NYX_PDF_MALICIOUS classifier also strongly indicated maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2097098099097097/The-Dork-Diaries-Set-Dork-Diaries-Books-1-2-3-3-1-2-4-and-5-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/4090096090093/Dork-Diaries-Book-2-Tales-from-a-Not-So-Popular-Party-Girl-Dork-Diaries-2-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/1090099099/Dork-Diaries-Book-9-Tales-from-a-Not-So-Dorky-Drama-Queen-Dork-Diaries-9-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/9099092096/Dork-Diaries-Book-7-Tales-from-a-Not-So-Glam-TV-Star-Dork-Diaries-7-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/4090091095092/Dork-Diaries-Book-5-Tales-from-a-Not-So-Smart-Miss-Know-It-All-Dork-Diaries-5-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/1099098090092091/Dork-Diaries-Book-10-Tales-from-a-Not-So-Perfect-Pet-Sitter-Dork-Diaries-10-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/1090098092/Dork-Diaries-Book-8-Tales-from-a-Not-So-Happily-Ever-After-Dork-Diaries-8-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/1092094093094091/TV-Star-Dork-Diaries-7-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/2097093095091099/Skating-Sensation-Dork-Diaries-4-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/8096090091095091/DORK-Diaries-Band-09-Nikkis-nicht-ganz-so-geheimes-Tagebuch-by-Rachel-Ren-e-Russell.pdf
    • http://loaminoo.linkpc.net/4091092095099/King-Dork-King-Dork-1-by-Frank-Portman.pdf
    • http://loaminoo.linkpc.net/6092090092095/The-Wiccan-Diaries-Neophyte-Adept-The-Wiccan-Diaries-Books-1-3-by-T-D-McMichael.pdf
    • http://loaminoo.linkpc.net/9090093092097095/The-Vampire-Diaries---Stefan-s-Diaries---Rache-ist-nicht-The-Vampire-Diaries-3-by-L-J-Smith.pdf
    • http://loaminoo.linkpc.net/8093090094092094/Latin-America-Diaries-The-Sequel-to-The-Motorcycle-Diaries-by-Ernesto-Che-Guevara.pdf
    • http://loaminoo.linkpc.net/3098096093095/The-Craving-The-Vampire-Diaries-Stefan-s-Diaries-3-by-L-J-Smith.pdf
    • http://loaminoo.linkpc.net/4097092093097/The-Asylum-The-Vampire-Diaries-Stefan-s-Diaries-5-by-L-J-Smith.pdf
    • http://loaminoo.linkpc.net/3096095091090/Bloodlust-The-Vampire-Diaries-Stefan-s-Diaries-2-by-L-J-Smith.pdf
    • http://loaminoo.linkpc.net/2094096095092090/Tall-Dork-and-Handsome-by-Remy-Richard.pdf
    • http://loaminoo.linkpc.net/1092094099090090/The-Jewish-Daughter-Diaries-by-Rachel-Ament.pdf
    • http://loaminoo.linkpc.net/3091095094090096/Camp-Dork-Pack-of-Dorks-2-by-Beth-Vrabel.pdf