Malicious PDF — malware analysis report

Static analysis result for SHA-256 08a9c8d035fd804d…

MALICIOUS

PDF

21.3 KB Created: 2019-04-30 04:00:12 +01:00 Authoring application: mPDF 5.7
MD5: b6cf361e526743c53c0054b44c66f4c5 SHA-1: ae58375b80edf0e570b9d6f07ef7be8f1e7cea89 SHA-256: 08a9c8d035fd804d46b04664286a7d7d4b7cf214b70b549eb039c52cbad5a09e
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While many of these links point to domains that have been confirmed as benign, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or to distribute further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/5094094092092/Learning-to-Trust-Learning-1-by-Cynthia-P-O-39-Neill.pdf
    • http://loaminoo.linkpc.net/2091096097099097/Learning-To-Love-Again-A-Learning-Series-Book-3-by-Cynthia-P-O-39-Neill.pdf
    • http://loaminoo.linkpc.net/3096099099090098/Learning-to-Let-Go-A-Learning-Series-Book-2-by-Cynthia-P-O-39-Neill.pdf
    • http://loaminoo.linkpc.net/5096090098094098/Learning-scikit-learn-Machine-Learning-in-Python-by-Ra-l-Garreta.pdf
    • http://loaminoo.linkpc.net/5090093098091091/All-Kinds-of-Minds-A-Young-Student-s-Book-about-Learning-Abilities-and-Learning-Disorders-by-Mel-Levine.pdf
    • http://loaminoo.linkpc.net/5094099098093099/Spontaneous-Communities-of-Learning-Learning-Ecosystems-SUrrounding-Virtual-Worlds-by-Lisa-Galarneau.pdf
    • http://loaminoo.linkpc.net/1090093097090094094/E-Learning-and-the-Science-of-Instruction-Proven-Guidelines-for-Consumers-and-Designers-of-Multimedia-Learning-With-CDROM-by-Richard-E-Mayer.pdf
    • http://loaminoo.linkpc.net/1090090093093093/The-Truth-About-Trust-How-It-Determines-Success-in-Life-Love-Learning-and-More-by-David-DeSteno.pdf
    • http://loaminoo.linkpc.net/6096091097098095/Implementing-Cisco-IOS-Network-Security-IINS-640-554-Foundation-Learning-Guide-Foundation-Learning-Guides-by-Catherine-Paquet.pdf
    • http://loaminoo.linkpc.net/1090094092094091096/Learning-from-Summer-Effects-of-Voluntary-Summer-Learning-Programs-on-Low-Income-Urban-Youth-by-Catherine-H-Augustine.pdf
    • http://loaminoo.linkpc.net/9096094099092096/Learning-Quotes-Inspirational-Picture-Quotes-about-Learning-and-Education-7-by-Gabi-Rupp.pdf
    • http://loaminoo.linkpc.net/2098099092091099/Learning-Mandarin-for-the-Fish-and-Chips-Learning-Mandarin-Chinese-in-Taiwan-and-Mandarin-Legal-Work-in-London-by-Hastings-Cavendish.pdf
    • http://loaminoo.linkpc.net/4095092095093096/Love-s-Learning-Curve-Learning-Curve-1-by-Felicia-Lynn.pdf
    • http://loaminoo.linkpc.net/9099092090093/Loving-You-Remembrance-2-by-Cynthia-P-O-39-Neill.pdf
    • http://loaminoo.linkpc.net/9094099090091092/Learning-to-Fly-by-Paul-Yee.pdf
    • http://loaminoo.linkpc.net/1091097097095092092/Learning-Carbon-by-Apple-Inc-.pdf
    • http://loaminoo.linkpc.net/7091095099093095/Carnal-Learning-by-D-J-Manly.pdf
    • http://loaminoo.linkpc.net/4094094099093091/Learning-to-Fly-by-Christopher-Hope.pdf
    • http://loaminoo.linkpc.net/2093092098096099/Learning-to-Fly-by-Shehani-Gomes.pdf
    • http://loaminoo.linkpc.net/1090099095093094092/Higher-Learning-by-D-J-Manly.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.