Malicious PDF — malware analysis report

Static analysis result for SHA-256 0dccd3aea3f319e1…

MALICIOUS

PDF

27.7 KB Created: 2019-04-30 04:25:34 +01:00 Authoring application: mPDF 5.7
MD5: a80ed0e98b81921b9812fdb6e528bdef SHA-1: 6dcacc971a9cc09f153e3ba9d10682e3fcef6e54 SHA-256: 0dccd3aea3f319e1d17ec8fabac81c83f23b45cb76f231edd81f97b65725bbc3
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to a dynamic DNS domain, identified by the PDF_SEO_LINK_FARM heuristic. While the URLs themselves are marked as confirmed benign, the sheer volume and the nature of the domain suggest a malicious intent, possibly for SEO manipulation or to host further malicious content. The ML_NYX_PDF_MALICIOUS heuristic also flagged the document with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090098090094099090/Geographic-Information-and-Cartography-for-Risk-and-Crisis-Management-Towards-Better-Solutions-by-Milan-Konecny.pdf
    • http://loaminoo.linkpc.net/1090098090094098097/Geoinformation-Remote-Sensing-Photogrammetry-and-Geographic-Information-Systems-Second-Edition-by-Gottfried-Konecny.pdf
    • http://loaminoo.linkpc.net/1091097090093096093/Corporate-Governance-Internal-Control-and-Risk-Management-The-Key-Role-of-Information-Systems-by-Robert-Jan-Streng.pdf
    • http://loaminoo.linkpc.net/8093096091096093/Information-Systems-for-Crisis-Response-and-Management-in-Mediterranean-Countries-Third-International-Conference-Iscram-Med-2016-Madrid-Spain-October-26-28-2016-Proceedings-by-Paloma-Diaz.pdf
    • http://loaminoo.linkpc.net/1091093097095093092/Strategic-Information-Management-Challenges-and-Strategies-in-Managing-Information-Systems-by-R-D-Galliers.pdf
    • http://loaminoo.linkpc.net/7092099090096094/Human-Interface-and-the-Management-of-Information-Information-and-Interaction-by-Gavriel-Salvendy.pdf
    • http://loaminoo.linkpc.net/5097098092095097/Fundamentals-of-Geographic-Information-Systems-by-Michael-N-DeMers.pdf
    • http://loaminoo.linkpc.net/1090096092097094091/Designing-for-Eartquakes-A-Manual-for-Architects-Fema-454-December-2006-Risk-Management-Series-by-Federal-Emergency-Management-Agency.pdf
    • http://loaminoo.linkpc.net/1090095094093099091/FEMA-455-Handbook-for-Rapid-Visual-Screening-of-Buildings-to-Evaluate-Terrorism-Risks-Risk-Management-Series-by-Federal-Emergency-Management-Agency.pdf
    • http://loaminoo.linkpc.net/7092099090096096/Human-Interface-And-The-Management-Of-Information-Interacting-With-Information-Symposium-On-Human-Interface-2011-Held-As-Part-Of-Hci-International-Applications-Incl-Internet-Web-And-Hci-by-Gavriel-Salvendy.pdf
    • http://loaminoo.linkpc.net/7099098090097093/Information-Security-Risk-Analysis-by-Thomas-R-Peltier.pdf
    • http://loaminoo.linkpc.net/6091091097090093/African-Legacy-Solutions-For-A-Community-In-Crisis-by-Bernard-Lugan.pdf
    • http://loaminoo.linkpc.net/8095092094092097/Management-Solutions-For-Veterinary-Practices-Hb-2012-by-Mercader-P-.pdf
    • http://loaminoo.linkpc.net/7092094090091096/Mastering-Information-Management-by-Donald-A-Marchand.pdf
    • http://loaminoo.linkpc.net/6095091095093099/Information-Systems-Management-Handbook-by-Jae-K-Shim.pdf
    • http://loaminoo.linkpc.net/5091094096099091/What-Is-Happening-to-News-The-Information-Explosion-and-the-Crisis-in-Journalism-by-Jack-Fuller.pdf
    • http://loaminoo.linkpc.net/4090093096092091/Running-Out-of-Water-The-Looming-Crisis-and-Solutions-to-Conserve-Our-Most-Precious-Resource-by-Peter-Rogers.pdf
    • http://loaminoo.linkpc.net/8092095091090095/Management-Basics-for-Information-Professionals-by-G-Edward-Evans.pdf
    • http://loaminoo.linkpc.net/6095091095093095/Information-System-Management-Handbook-by-Joel-G-Siegel.pdf
    • http://loaminoo.linkpc.net/1091095090095098098/Information-Technology-Project-Management-by-Kathy-Schwalbe.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.