Malicious PDF — malware analysis report

Static analysis result for SHA-256 085c67101c57b7c1…

MALICIOUS

PDF

17.2 KB Created: 2019-05-01 18:23:57 +01:00 Authoring application: mPDF 5.7 First seen: 2021-01-23
MD5: f0675e29fa1aaf288f94990e8b74588c SHA-1: c7119e92c84ff255e861c8c0f16a8ea3a33bc922 SHA-256: 085c67101c57b7c13b6a52aabd9b358212304e1eb18d2db94cd58d1350d77834
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/5093093098094092/Der-Lustmolch-Roman-by-Christopher-Moore.pdf In PDF document text
    • http://loaminoo.linkpc.net/3096097090095099/A-Dirty-Job-by-Christopher-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3090096093090/Sacr-Bleu-by-Christopher-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3095093095097099/Coyote-Blue-by-Christopher-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8095096094095/Coyote-Blue-by-Christopher-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9090093094090091/Sacre-Bleu-A-Comedy-d-Art-by-Christopher-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3095097091096095/Secondhand-Souls-Grim-Reaper-2-by-Christopher-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2091092096099098/Bloodsucking-Fiends-A-Love-Story-by-Christopher-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3099091099094095/The-Stupidest-Angel-Pine-Cove-3-by-Christopher-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2090099091098093/Fluke-Or-I-Know-Why-the-Winged-Whale-Sings-by-Christopher-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1091090095095097093/The-Stupidest-Angel-with-Bonus-Material-by-Christopher-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7094092097094091/Dog-Food-for-the-Soul-San-Diego-amp-Nouveau-Roman-Stories-by-Kealan-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3098094092091098/Santa-and-Pete-A-Novel-of-Christmas-Present-and-Past-by-Christopher-Paul-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3090091095093091/The-Stupidest-Angel-v2-0-A-Heartwarming-Tale-of-Christmas-Terror-by-Christopher-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5095093098099093/Coinage-and-Identity-in-the-Roman-Provinces-by-Christopher-Howgego.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090091099092097092/Dishonored-Zersplittert-Roman-zum-Videogame-by-Adam-Christopher.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1094093090091098/The-Stupidest-Angel-A-Heartwarming-Tale-of-Christmas-Terror-Pine-Cove-3-by-Christopher-Moore.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6093096094096098/Render-to-Caesar-Jesus-the-Early-Church-and-the-Roman-Superpower-by-Christopher-Bryan.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2099097099091092/A-Most-Dangerous-Book-Tacitus-s-Germania-from-the-Roman-Empire-to-the-Third-Reich-by-Christopher-B-Krebs.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4090093093098096/Chronicle-of-the-Roman-Emperors-The-Reign-by-Reign-Record-of-the-Rulers-of-Imperial-Rome-by-Christopher-Scarre.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.