Malicious PDF — malware analysis report

Static analysis result for SHA-256 1082e2208b481d79…

MALICIOUS

PDF

16.6 KB Created: 2019-05-01 17:28:10 +01:00 Authoring application: mPDF 5.7
MD5: 4f96ba0d914b3f6e9ce83c5bdf1a4f69 SHA-1: 6b9cc574274ae065aa2782ceb50a2f228b060f7e SHA-256: 1082e2208b481d79af3264dd4e7e28450906b16d146e1868ead9e1b612d7797c
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, pointing to various book titles. While the URLs themselves are marked as confirmed benign, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or to distribute further payloads. The ML_NYX_PDF_MALICIOUS classifier also strongly indicated maliciousness. No scripts were extracted, but the embedded links are the primary IOCs.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9913

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091090098097095095/The-Suburbs-Have-Secrets-Sadie-McIntyre-Mystery-1-by-Barbara-Wallace.pdf
    • http://loaminoo.linkpc.net/1090090097091093092/Secrets-of-the-Suburbs-by-Alisa-Schindler.pdf
    • http://loaminoo.linkpc.net/9099098094092090/A-Knit-before-Dying-Tangled-Web-Mystery-2-by-Sadie-Hartwell.pdf
    • http://loaminoo.linkpc.net/9098094097090094/Sadie-s-Adventures-Sadie-learns-to-swim-Volume-1-by-Zaira-Lucia-Illanes.pdf
    • http://loaminoo.linkpc.net/1097097094090/The-Mystery-of-the-Undercover-Clitoris-Orgasmic-Fingertip-Touching-Every-Woman-Craves-by-Sadie-Allison.pdf
    • http://loaminoo.linkpc.net/4099090095097096/The-Millionaire-s-Redemption-by-Barbara-Wallace.pdf
    • http://loaminoo.linkpc.net/2091090094098092/Sadie-Sadie-1-by-Rebecca-Belliston.pdf
    • http://loaminoo.linkpc.net/2094094094090092/Sadie-Rose-and-the-Daring-Escape-A-Sadie-Rose-Adventure-1-by-Hilda-Stahl.pdf
    • http://loaminoo.linkpc.net/1091090098097090098/Ranger-McIntyre-Unmentionable-Murders-Ranger-McIntyre-1-by-James-C-Work.pdf
    • http://loaminoo.linkpc.net/8094097095/The-Art-of-Inheriting-Secrets-by-Barbara-O-39-Neal.pdf
    • http://loaminoo.linkpc.net/3095090094093091/The-Secrets-She-Carried-by-Barbara-Davis.pdf
    • http://loaminoo.linkpc.net/1092094093095/Callan-s-Proposition-Secrets-4-by-Barbara-McCauley.pdf
    • http://loaminoo.linkpc.net/4092098097096096/Secrets-You-Tell-Me-Yours-and-I-ll-Tell-You-Mine-Maybe-by-Barbara-Becker-Holstein.pdf
    • http://loaminoo.linkpc.net/2091096099091094/Uncovering-Secrets-Rosemont-Saga-3-by-Barbara-Hinske.pdf
    • http://loaminoo.linkpc.net/1092094099093/Secret-Baby-Santos-Secrets-2-by-Barbara-McCauley.pdf
    • http://loaminoo.linkpc.net/1091090094092099097/Sadie-Sapiens-Sadie-Sapiens-1-by-Jeff-T-Bauer.pdf
    • http://loaminoo.linkpc.net/1090094096093098094/Secrets-of-an-Organized-Mom-How-to-Declutter-and-Streamline-Your-Home-for-a-Happier-Family-by-Barbara-Reich.pdf
    • http://loaminoo.linkpc.net/1094094096093096/Fifth-Son-Inspector-Green-Mystery-4-by-Barbara-Fradkin.pdf
    • http://loaminoo.linkpc.net/7092090091092090/Paranoid-Suburbs-by-Garth-Erickson.pdf
    • http://loaminoo.linkpc.net/2097091091093096/Boiled-Over-A-Maine-Clambake-Mystery-2-by-Barbara-Ross.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.