Malicious PDF — malware analysis report

Static analysis result for SHA-256 076225cec7974da8…

MALICIOUS

PDF

17.3 KB Created: 2019-04-30 05:46:03 +01:00 Authoring application: mPDF 5.7
MD5: ef4c5fa513496e16c7d0187e52d742fe SHA-1: 39bcfdd8c3ab018a40b0faab2c43a1d0c46f7c47 SHA-256: 076225cec7974da8b703b942d519ff841a9f28003e6601360730b3b2c29b4a86
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. These links point to various PDF files hosted on the 'linkpc.net' domain, suggesting a link farm or redirection scheme. The ML classifier also flagged this PDF as malicious. The primary attack pattern appears to be directing users to a large collection of external resources, likely for SEO manipulation or to host malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6093094096096093/Life-with-Lily-The-Adventures-of-Lily-Lapp-1-by-Mary-Ann-Kinsinger.pdf
    • http://loaminoo.linkpc.net/2097098096092097/A-New-Home-for-Lily-The-Adventures-of-Lily-Lapp-2-by-Mary-Ann-Kinsinger.pdf
    • http://loaminoo.linkpc.net/6099094095093093/Here-s-Lily-Young-Women-of-Faith-Lily-Series-1-by-Nancy-N-Rue.pdf
    • http://loaminoo.linkpc.net/6099094095099099/Ask-Lily-Young-Women-of-Faith-Lily-Series-5-by-Nancy-N-Rue.pdf
    • http://loaminoo.linkpc.net/3090092090094/Lily-Goes-to-School-by-Lily-Hamilton.pdf
    • http://loaminoo.linkpc.net/6093094096091099/Lily-Lily-1-by-Holly-Webb.pdf
    • http://loaminoo.linkpc.net/6093094096096090/Dead-of-Winter-Lily-Dale-Mystery-3-amp-Lily-Dale-7-by-Wendy-Corsi-Staub.pdf
    • http://loaminoo.linkpc.net/2096093094092099/Nine-Lives-Lily-Dale-Mystery-1---Lily-Dale-5-by-Wendy-Corsi-Staub.pdf
    • http://loaminoo.linkpc.net/4098093098093097/Blue-Lily-Lily-Blue-The-Raven-Cycle-3-by-Maggie-Stiefvater.pdf
    • http://loaminoo.linkpc.net/9099093098/Blue-Lily-Lily-Blue-The-Raven-Cycle-3-by-Maggie-Stiefvater.pdf
    • http://loaminoo.linkpc.net/1098097093098092/Dash-amp-Lily-s-Book-of-Dares-Dash-amp-Lily-1-by-Rachel-Cohn.pdf
    • http://loaminoo.linkpc.net/5096091091096093/Tiger-Lily-Part-One-Tiger-Lily-1-by-Am-lie-S-Duncan.pdf
    • http://loaminoo.linkpc.net/3094091096093096/Love-Lies-and-Hocus-Pocus-Allies-The-Lily-Singer-Adventures-3-by-Lydia-Sherrer.pdf
    • http://loaminoo.linkpc.net/6099090094099098/The-Double-Life-of-Liliane-by-Lily-Tuck.pdf
    • http://loaminoo.linkpc.net/2097093097093090/The-Red-Leather-Diary-Reclaiming-a-Life-Through-the-Pages-of-a-Lost-Journal-by-Lily-Koppel.pdf
    • http://loaminoo.linkpc.net/9097094097099095/Focus-On-100-Most-Popular-Feminist-Artists-Jane-Fonda-Julia-Stiles-Zooey-Deschanel-Diane-Keaton-Lily-Tomlin-Yoko-Ono-Hayao-Miyazaki-Ellen-Page-Rachel-Dolezal-Mary-Pickford-etc-by-Wikipedia-contributors.pdf
    • http://loaminoo.linkpc.net/2096093096094092/Here-s-Lily-by-Nancy-N-Rue.pdf
    • http://loaminoo.linkpc.net/3096095094097090/Lily-The-Seer-1-by-R-M-Walker.pdf
    • http://loaminoo.linkpc.net/3097097096095091/Me-and-You-and-Daisies-by-Lily-R-Mason.pdf
    • http://loaminoo.linkpc.net/4099096090096099/The-King-and-Us-by-Lily-Juwette.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.