Malicious PDF — malware analysis report

Static analysis result for SHA-256 06e3e50767fd925c…

MALICIOUS

PDF

14.9 KB Created: 2019-04-30 07:18:11 +01:00 Authoring application: mPDF 5.7
MD5: 32b55d2d6fd92d31e5c13a65e4c401b9 SHA-1: f07ca163cd9bc2b444c705c8739835facd0b5184 SHA-256: 06e3e50767fd925c137b0849ad87a8b884c14d39ceebe09003719bc6119098e7
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, forming a link farm. This is indicative of SEO poisoning or a similar tactic to drive traffic to potentially malicious sites. The ML classifier also flagged this PDF as malicious, supporting the suspicious nature of the embedded links.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9798

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1098096094099/Infinite-Variety-The-Life-and-Legend-of-the-Marchesa-Casati-by-Scot-D-Ryersson.pdf
    • http://loaminoo.linkpc.net/2095092096091092/One-Life-Jesus-Calls-We-Follow-by-Scot-McKnight.pdf
    • http://loaminoo.linkpc.net/3099091094090097/Infinite-Life-by-Robert-A-F-Thurman.pdf
    • http://loaminoo.linkpc.net/4095096099098091/Infinite-Space-Infinite-God-II-by-Karina-Lumbert-Fabian.pdf
    • http://loaminoo.linkpc.net/2092093098090092/Infinite-Space-Infinite-God-by-Karina-Lumbert-Fabian.pdf
    • http://loaminoo.linkpc.net/3090096093098098/14-Minutes-A-Running-Legend-s-Life-and-Death-and-Life-by-Alberto-Salazar.pdf
    • http://loaminoo.linkpc.net/1097090099095092/Infinite-Possibilities-The-Secret-Life-of-Amy-Bensen-2-by-Lisa-Renee-Jones.pdf
    • http://loaminoo.linkpc.net/5094093095099/Infinite-Possibilities-The-Secret-Life-of-Amy-Bensen-2-by-Lisa-Renee-Jones.pdf
    • http://loaminoo.linkpc.net/3099096097091090/Finite-and-Infinite-Games-A-Vision-of-Life-as-Play-and-Possibility-by-James-P-Carse.pdf
    • http://loaminoo.linkpc.net/1090093099097095/Cassie-Scot-Cassie-Scot-1-by-Christine-Amsden.pdf
    • http://loaminoo.linkpc.net/2092095094091/Cassie-Scot-Cassie-Scot-1-by-Christine-Amsden.pdf
    • http://loaminoo.linkpc.net/5098096099090090/The-Variety-Artistes-by-Tom-Wakefield.pdf
    • http://loaminoo.linkpc.net/8092097090097/Rin-Tin-Tin-The-Life-and-the-Legend-by-Susan-Orlean.pdf
    • http://loaminoo.linkpc.net/2093096091094096/Kay-s-Lucky-Coin-Variety-by-Ann-Y-K-Choi.pdf
    • http://loaminoo.linkpc.net/7092092097098095/The-Life-and-Legend-of-E-H-Harriman-by-Maury-Klein.pdf
    • http://loaminoo.linkpc.net/6095094095092099/TV-s-Grooviest-Variety-Shows-of-the-60s-and-70s-by-Telly-R-Davidson.pdf
    • http://loaminoo.linkpc.net/1091098092093090092/The-Sad-Variety-Nigel-Strangeways-15-by-Nicholas-Blake.pdf
    • http://loaminoo.linkpc.net/4092095098098095/Saladin-The-Life-the-Legend-and-the-Islamic-Empire-by-John-Man.pdf
    • http://loaminoo.linkpc.net/9093095096093/I-Must-Say-My-Life-as-a-Humble-Comedy-Legend-by-Martin-Short.pdf
    • http://loaminoo.linkpc.net/2092092094091092/John-Wayne-The-Life-and-Legend-by-Scott-Eyman.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.