Malicious PDF — malware analysis report

Static analysis result for SHA-256 0408364abb4acddc…

MALICIOUS

PDF

20.7 KB Created: 2019-05-20 01:09:15 +01:00 Authoring application: mPDF 5.7
MD5: 7f2b787ca315f228290557d9cb448d75 SHA-1: 22d96987d4202157e0da127242313c131de725d2 SHA-256: 0408364abb4acddc9e144b5c9c9fd0f934404326acda92b7e079ac852371054e
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While many of these links point to benign-looking documents, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or to host further malicious content. The ML_NYX_PDF_MALICIOUS classifier also strongly indicated maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/5098093091092090/Tony-Robbins-His-Best-Insights-tony-robbins-anthony-robbins-unleash-the-power-within-unlimited-power-bandler-nlp-hypnosis-success-by-Jim-Bandler.pdf
    • http://loaminoo.linkpc.net/3096093090095099/Unleash-The-Power-Within-Personal-Coaching-From-Anthony-Robbins-That-Will-Transform-Your-Life-by-Anthony-Robbins.pdf
    • http://loaminoo.linkpc.net/5098093090098097/Articles-on-Neuro-Linguistic-Programming-Writers-Including-John-Grinder-Richard-Bandler-Tony-Robbins-Robert-Dilts-Judith-DeLozier-Stephen-Gilligan-Ross-Jeffries-Paul-McKenna-David-Gordon-by-Hephaestus-Books.pdf
    • http://loaminoo.linkpc.net/7096095094095092/Secrets-of-the-Tomb-Skull-and-Bones-the-Ivy-League-and-the-Hidden-Paths-of-Power-by-Alexandra-Robbins.pdf
    • http://loaminoo.linkpc.net/3092092094097097/Get-the-Edge-by-Anthony-Robbins.pdf
    • http://loaminoo.linkpc.net/4091092097093094/Notes-From-A-Friend-by-Anthony-Robbins.pdf
    • http://loaminoo.linkpc.net/2092096094095091/Money-Master-the-Game-7-Simple-Steps-to-Financial-Freedom-by-Anthony-Robbins.pdf
    • http://loaminoo.linkpc.net/3098091096098099/Pumpkins-by-Ken-Robbins.pdf
    • http://loaminoo.linkpc.net/1095091098097092/Dog-by-Mike-Robbins.pdf
    • http://loaminoo.linkpc.net/5094097090094094/The-Power-of-Responsibility-Six-Decisions-That-Will-Help-You-Take-Back-Happiness-and-Create-Unlimited-Success-by-Joelle-Casteix.pdf
    • http://loaminoo.linkpc.net/1094099099092094/War-of-the-Rats-by-David-L-Robbins.pdf
    • http://loaminoo.linkpc.net/6095092093097091/The-Horse-and-His-Boy-by-Glyn-Robbins.pdf
    • http://loaminoo.linkpc.net/2094091093096096/The-Ravens-by-Christopher-Robbins.pdf
    • http://loaminoo.linkpc.net/3093098094091/Skinny-Legs-and-All-by-Tom-Robbins.pdf
    • http://loaminoo.linkpc.net/3093096095093/Another-Roadside-Attraction-by-Tom-Robbins.pdf
    • http://loaminoo.linkpc.net/3093090090094/Even-Cowgirls-Get-the-Blues-by-Tom-Robbins.pdf
    • http://loaminoo.linkpc.net/3092096092090/Jitterbug-Perfume-by-Tom-Robbins.pdf
    • http://loaminoo.linkpc.net/2099099091091095/Even-Cowgirls-Get-the-Blues-by-Tom-Robbins.pdf
    • http://loaminoo.linkpc.net/2094093098094090/The-Accomplice-by-Charles-Robbins.pdf
    • http://loaminoo.linkpc.net/5093098093093097/Spectre-by-David-Robbins.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.