Malicious PDF — malware analysis report

Static analysis result for SHA-256 04be87e6dc24661e…

MALICIOUS

PDF

29.1 KB Created: 2019-05-02 17:28:30 +01:00 Authoring application: mPDF 5.7
MD5: c31b4ed94c0a38e470c540e43d132a1e SHA-1: 5769b87956d33341652cb2ad96d0193b905f1ede SHA-256: 04be87e6dc24661e89eacc74c11c0a68baa28a0fe8a32f05959bba2961045b25
100 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, pointing to various book-related URLs. While the document body text is heavily obfuscated, the presence of these links and the ML_NYX_PDF_MALICIOUS flag indicate a malicious intent, likely to manipulate search engine results or distribute malicious content through these links. No scripts were extracted, but the structure suggests a potential for JavaScript execution if further exploited.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9892

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Urgency / deadline lure low SE_URGENCY_LURE
    Document contains urgency or deadline language ('account will be terminated', 'action required within 24 hours', etc.) — useful context, but low-signal without other findings
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090096091090099096/Event-Management-For-Tourism-Cultural-Business-and-Sporting-Events-by-Lynn-van-der-Wagen.pdf
    • http://loaminoo.linkpc.net/5090092091097094/The-Kentucky-Derby-How-the-Run-for-the-Roses-Became-America-s-Premier-Sporting-Event-by-James-C-Nicholson.pdf
    • http://loaminoo.linkpc.net/1098090095099/And-the-Crowd-Goes-Wild-Relive-the-Most-Celebrated-Sporting-Events-Ever-Broadcast-by-Joe-Garner.pdf
    • http://loaminoo.linkpc.net/6091091094096096/Last-Chance-Tourism-Adapting-Tourism-Opportunities-in-a-Changing-World-by-Raynald-Harvey-Lemelin.pdf
    • http://loaminoo.linkpc.net/8093095092093095/Doing-Business-with-Benedict-The-Rule-of-Saint-Benedict-and-Business-Management-A-Conservation-by-Kit-Dollard.pdf
    • http://loaminoo.linkpc.net/1091096098096096093/Business-Logistics-Management-by-Ronald-H-Ballou.pdf
    • http://loaminoo.linkpc.net/1090098092093098095/The-Routledge-Dictionary-of-Business-Management-by-David-A-Statt.pdf
    • http://loaminoo.linkpc.net/7099098092094092/Risk-Management-for-Business-and-Security-by-Thomas-R-Peltier.pdf
    • http://loaminoo.linkpc.net/6093099094095/Small-Business-Management-Launching-and-Growing-Entrepreneurial-Ventures-by-Justin-G-Longenecker.pdf
    • http://loaminoo.linkpc.net/6093094099098093/The-Kama-Sutra-of-Business-Management-Principles-from-Indian-Classics-by-Nury-Vittachi.pdf
    • http://loaminoo.linkpc.net/8099095097095094/The-Proverbs-Management-Handbook-A-Christian-Manager-s-Guide-to-Doing-Business-by-John-A-Guderian.pdf
    • http://loaminoo.linkpc.net/8090091098096093/Doing-Business-in-Russia-and-the-Other-Former-Soviet-Republics-Accounting-and-Financial-Management-Issues-an-Updated-Study-by-Adolf-Jan-Henri-Enthoven.pdf
    • http://loaminoo.linkpc.net/2092098093097095/Warren-Buffett-s-Management-Secrets-Proven-Tools-for-Personal-and-Business-Success-by-Mary-Buffett.pdf
    • http://loaminoo.linkpc.net/2093092095097095/Warren-Buffett-s-Management-Secrets-Proven-Tools-for-Personal-and-Business-Success-by-Mary-Buffett.pdf
    • http://loaminoo.linkpc.net/1090096092097099094/Gao-04-454-Contract-Management-Impact-of-Strategy-to-Mitigate-Effects-of-Contract-Bundling-on-Small-Business-Is-Uncertain-by-U-S-Government-Accountability-Office.pdf
    • http://loaminoo.linkpc.net/1090096091090099098/Pauline-s-Perils-of-Perplexity-by-L-S-Wagen.pdf
    • http://loaminoo.linkpc.net/4092091098097097/Entrepreneurship-The-Online-Money-Factory---Online-Business-Home-Business-amp-Business-Startup-by-Brian-Windley.pdf
    • http://loaminoo.linkpc.net/7097098097091097/Debating-Cultural-Hybridity-Multi-Cultural-Identities-and-the-Politics-of-Anti-Racism-by-Tariq-Modood.pdf
    • http://loaminoo.linkpc.net/3093090097096095/The-Tao-of-Warren-Buffett-Warren-Buffett-s-Words-of-Wisdom-Quotations-and-Interpretations-to-Help-Guide-You-to-Billionaire-Wealth-and-Enlightened-Business-Management-by-Mary-Buffett.pdf
    • http://loaminoo.linkpc.net/8097090091094/A-Series-of-Unfortunate-Events-Collection-Books-10-13-A-Series-of-Unfortunate-Events-Boxset-by-Lemony-Snicket.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.