Malicious PDF — malware analysis report

Static analysis result for SHA-256 0c99982b6aa34e05…

MALICIOUS

PDF

13.1 KB Created: 2019-04-30 04:33:26 +01:00 Authoring application: mPDF 5.7
MD5: 38ed76558b9896369833ae4e266c9f44 SHA-1: e2bcc6b990350385409b4a37106357e48c15b4ba SHA-256: 0c99982b6aa34e055037f1b45526044326bb405247adec6a3433fc402c24b57f
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, many of which are structured as numeric slugs, indicating a potential SEO link farm. The ML classifier also flagged this PDF as malicious. While the URLs themselves are marked as benign, the sheer volume and structure suggest a malicious intent to manipulate search engine rankings or redirect users to potentially harmful content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9006

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4092096094091093/Rat-Queens-Vol-6-The-Infernal-Path-Rat-Queens-6-by-Kurtis-J-Wiebe.pdf
    • http://loaminoo.linkpc.net/2097099095091094/Rat-Queens-Vol-5-The-Colossal-Magic-Nothing-Rat-Queens-5-by-Kurtis-J-Wiebe.pdf
    • http://loaminoo.linkpc.net/1099093093092092/Rat-Queens-5-by-Kurtis-J-Wiebe.pdf
    • http://loaminoo.linkpc.net/1099093093095096/Rat-Queens-15-by-Kurtis-J-Wiebe.pdf
    • http://loaminoo.linkpc.net/1099093093095095/Rat-Queens-14-by-Kurtis-J-Wiebe.pdf
    • http://loaminoo.linkpc.net/1099093093092095/Rat-Queens-6-by-Kurtis-J-Wiebe.pdf
    • http://loaminoo.linkpc.net/1099093093095091/Rat-Queens-11-by-Kurtis-J-Wiebe.pdf
    • http://loaminoo.linkpc.net/9090092099099098/Grim-Leaper-by-Kurtis-J-Wiebe.pdf
    • http://loaminoo.linkpc.net/4094092093091092/Green-Wake-Volume-1-TP-by-Kurtis-J-Wiebe.pdf
    • http://loaminoo.linkpc.net/3099095092096091/Queens-Consort-England-s-Medieval-Queens-by-Lisa-Hilton.pdf
    • http://loaminoo.linkpc.net/7092092091093096/Queens-of-the-Conquest-England-s-Medieval-Queens-by-Alison-Weir.pdf
    • http://loaminoo.linkpc.net/8098097092098099/Six-Tudor-Queens-Writing-a-New-Story-Six-Tudor-Queens-0-1-by-Alison-Weir.pdf
    • http://loaminoo.linkpc.net/2093094096092093/Mamba-Point-by-Kurtis-Scaletta.pdf
    • http://loaminoo.linkpc.net/5095097093099/A-Discovery-Of-Strangers-by-Rudy-Wiebe.pdf
    • http://loaminoo.linkpc.net/9093092093094097/Peace-Shall-Destroy-Many-by-Rudy-Wiebe.pdf
    • http://loaminoo.linkpc.net/1091098091091091095/Invisible-Dead-Wakeland-1-by-Sam-Wiebe.pdf
    • http://loaminoo.linkpc.net/2093095099093097/The-Temptations-of-Big-Bear-by-Rudy-Wiebe.pdf
    • http://loaminoo.linkpc.net/2091099095094096/The-Twisted-Deliverance-of-Anne-Merchant-The-V-Trilogy-3-by-Joanna-Wiebe.pdf
    • http://loaminoo.linkpc.net/1094094094093097/Stolen-Life-Journey-Of-A-Cree-Woman-by-Rudy-Wiebe.pdf
    • http://loaminoo.linkpc.net/5094098098091097/A-Tale-of-2-Queens-by-Mirage.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.