Malicious PDF — malware analysis report

Static analysis result for SHA-256 03723589e45dd121…

MALICIOUS

PDF

16.2 KB Created: 2019-04-30 05:23:33 +01:00 Authoring application: mPDF 5.7
MD5: 23142dd5e8177f308b5dbad15fe21097 SHA-1: abb2cb3c999020194af77ffdf3fb1a10db767327 SHA-256: 03723589e45dd121cdf65a38af0c6ab24a8c2e62df5837a74c1b884145d69bfb
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links, identified as a link farm by the PDF_SEO_LINK_FARM heuristic. While no scripts were explicitly extracted, the presence of embedded URLs and the ML_NYX_PDF_MALICIOUS firing suggest malicious intent, likely to redirect users to malicious or phishing content. The document body was unreadable, preventing a more specific analysis of its lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3098090096090096/One-Wish-Thirteen-Treasures-0-5-by-Michelle-Harrison.pdf
    • http://loaminoo.linkpc.net/8096091097093/13-Secrets-Thirteen-Treasures-3-by-Michelle-Harrison.pdf
    • http://loaminoo.linkpc.net/1091098099099090098/Flappers-and-Philosophers-1920-by-Francis-Scott-Fitzgerald-Francis-Scott-Key-Fitzgerald-September-24-1896---December-21-1940-Known-Professionally-as-F-Scott-Fitzgerald-Was-an-American-Novelist-and-Short-Story-Writer-Whose-Works-Illustrate-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/4090091097096093/Thirteen-by-Shannon-L-Peel.pdf
    • http://loaminoo.linkpc.net/1091092092090094/Thirteen-Reasons-Why-by-Jay-Asher.pdf
    • http://loaminoo.linkpc.net/9095099098098/Thirteen-by-Richard-K-Morgan.pdf
    • http://loaminoo.linkpc.net/1093098098093096/These-Thirteen-by-William-Faulkner.pdf
    • http://loaminoo.linkpc.net/4090099093090095/Thirteen-At-Dinner-by-Agatha-Christie.pdf
    • http://loaminoo.linkpc.net/3097090094097097/Thirteen-Steps-Down-by-Ruth-Rendell.pdf
    • http://loaminoo.linkpc.net/3094099095095090/Thirteen-Ways-of-Looking-by-Colum-McCann.pdf
    • http://loaminoo.linkpc.net/7098092098098093/Reapers-Thirteen-Brothers-by-tsubame.pdf
    • http://loaminoo.linkpc.net/1091094091090093091/Bean-Thirteen-by-Matthew-McElligott.pdf
    • http://loaminoo.linkpc.net/4096098092092091/Thirteen-Guests-by-J-Jefferson-Farjeon.pdf
    • http://loaminoo.linkpc.net/1091091095099091/Thirteen-Adam-Grant-1-by-Tom-Hoyle.pdf
    • http://loaminoo.linkpc.net/2092092096093095/Forever-Thirteen-by-Crissi-Langwell.pdf
    • http://loaminoo.linkpc.net/3096092091098/Thirteen-Moons-by-Charles-Frazier.pdf
    • http://loaminoo.linkpc.net/4097099099097093/Thirteen-Love-by-Numbers-4-by-E-S-Carter.pdf
    • http://loaminoo.linkpc.net/1098098096/Thirteen-Ways-of-Looking-by-Colum-McCann.pdf
    • http://loaminoo.linkpc.net/1090092096091097096/Thirteen-Hours-by-Deon-Meyer.pdf
    • http://loaminoo.linkpc.net/2093096096094093/Thirteen-Steps-Down-by-Ruth-Rendell.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.