Malicious PDF — malware analysis report

Static analysis result for SHA-256 0b1ea72c0ae6b5e4…

MALICIOUS

PDF

16.4 KB Created: 2019-04-30 03:26:54 +01:00 Authoring application: mPDF 5.7
MD5: 33426719f655dfc508723df36932853d SHA-1: 881b95439958cc353c5bd57dc1cacdd0bcd8b98b SHA-256: 0b1ea72c0ae6b5e48d759cfc19322438ca497a1e51ce04ff3cc3ba5ffea10b69
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. These links point to various book titles hosted on a dynamic DNS domain, suggesting a potential SEO manipulation scheme or a distribution point for further malicious content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3091098090092093/Cat-Scratch-Fever-Cat-Scratch-1-by-Tara-K-Harper.pdf
    • http://loaminoo.linkpc.net/1091094098092099094/Scratch-Fever-Nolan-6-by-Max-Allan-Collins.pdf
    • http://loaminoo.linkpc.net/8095097092092091/Pale-Blue-Scratch-by-Jay-DiNitto.pdf
    • http://loaminoo.linkpc.net/2097095090095095/Starting-from-Scratch-by-Rita-Mae-Brown.pdf
    • http://loaminoo.linkpc.net/3097094093092090/Starting-from-Scratch-by-Stacy-Gail.pdf
    • http://loaminoo.linkpc.net/3098098098099096/Starting-from-Scratch-by-Kate-Lloyd.pdf
    • http://loaminoo.linkpc.net/2099091097091098/From-Scratch-Love-Lines-2-5-by-Diana-Nixon.pdf
    • http://loaminoo.linkpc.net/4095091091097098/From-Scratch-Blue-Plate-1-by-Rachel-Goodman.pdf
    • http://loaminoo.linkpc.net/8091093099098096/Scratch-amp-Co-The-Great-Cat-Expedition-by-Molly-Lefebure.pdf
    • http://loaminoo.linkpc.net/3097097093092090/An-Itch-to-Scratch-Bloodrose-1-by-Julia-Talbot.pdf
    • http://loaminoo.linkpc.net/8092096099095090/Scratch-amp-Sniff-Book-of-Weed-by-Seth-Matlins.pdf
    • http://loaminoo.linkpc.net/5096094095091099/Katie-Starting-from-Scratch-Cupcake-Diaries-21-by-Coco-Simon.pdf
    • http://loaminoo.linkpc.net/8094090097098099/Quick-from-Scratch-Pasta-Cookbook-by-Food-amp-Wine-Magazine.pdf
    • http://loaminoo.linkpc.net/6096099091096094/Cooking-for-Gracie-The-Making-of-a-Parent-from-Scratch-by-Keith-Dixon.pdf
    • http://loaminoo.linkpc.net/2091096097096096/Love-Made-From-Scratch---A-Coming-Home-Novel-3-by-Tori-Bailey.pdf
    • http://loaminoo.linkpc.net/2096091092095092/Scratch-Writers-Money-and-the-Art-of-Making-a-Living-by-Manjula-Martin.pdf
    • http://loaminoo.linkpc.net/4097097/Life-from-Scratch-A-Memoir-of-Food-Family-and-Forgiveness-by-Sasha-Martin.pdf
    • http://loaminoo.linkpc.net/2096097091090098/Made-from-Scratch-Discovering-the-Pleasures-of-a-Handmade-Life-by-Jenna-Woginrich.pdf
    • http://loaminoo.linkpc.net/2093098095090090/The-Toaster-Project-Or-a-Heroic-Attempt-to-Build-a-Simple-Electric-Appliance-from-Scratch-by-Thomas-Thwaites.pdf
    • http://loaminoo.linkpc.net/6094098094095091/The-A-Zs-of-Worldbuilding-Building-a-Fictional-World-From-Scratch-The-A-Zs-of-Worldbuilding-1-by-Rebekah-Loper.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.