Malicious PDF — malware analysis report

Static analysis result for SHA-256 1085791a673469a2…

MALICIOUS

PDF

19.9 KB Created: 2019-05-02 17:27:10 +01:00 Authoring application: mPDF 5.7
MD5: 36fc1c1c3f8028122bcd72d08adcb4a7 SHA-1: cbddc68f9a87ddc7c9f3daf19c454cfedc8fd8bb SHA-256: 1085791a673469a2cef71e9fb20f6240c12b22cc8f72e6a5759455015943c50a
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, forming a link farm. The primary heuristic indicates this is a technique to distribute SEO-optimized PDFs, likely as a lure. While the specific URLs appear benign, the sheer volume and structure suggest a malicious intent to drive traffic or potentially host malicious content indirectly. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9922

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090095098090096093/Simplify-A-Guide-To-Caring-For-The-Soul-by-Carolyn-J-Rasmus.pdf
    • http://loaminoo.linkpc.net/1090095098090096097/The-Rasmus-The-Rasmus-Albums-the-Rasmus-Members-the-Rasmus-Songs-the-Rasmus-Discography-Ghostbusters-Dead-Letters-Hide-from-the-Sun-by-Source-Wikipedia.pdf
    • http://loaminoo.linkpc.net/5094093092091091/Nurse-The-Art-of-Caring-by-Carolyn-Jourdan.pdf
    • http://loaminoo.linkpc.net/4099092097098096/The-Joy-of-Less-A-Minimalist-Guide-to-Declutter-Organize-and-Simplify-by-Francine-Jay.pdf
    • http://loaminoo.linkpc.net/9094096097/Are-u-ok-A-Guide-to-Caring-for-Your-Mental-Health-by-Kati-Morton.pdf
    • http://loaminoo.linkpc.net/1090095098090097090/Maximum-Rasmus-The-Unauthorised-Biography-Of-The-Rasmus-Maximum-series-by-Andrea-Thorn.pdf
    • http://loaminoo.linkpc.net/9099093097090097/Spots-Birthmarks-and-Rashes-The-Complete-Guide-to-Caring-for-Your-Child-s-Skin-by-June-Thompson.pdf
    • http://loaminoo.linkpc.net/1090095098091095093/Life-Story-of-Rasmus-B-Anderson-by-Rasmus-Bj-rn-Anderson.pdf
    • http://loaminoo.linkpc.net/2092091095090091/The-Last-Soul-by-Carolyn-Rosewood.pdf
    • http://loaminoo.linkpc.net/1090097090091095098/Body-amp-Soul-Ten-American-Women-by-Carolyn-Coman.pdf
    • http://loaminoo.linkpc.net/1090099097097095092/The-Migraine-Brain-Your-Breakthrough-Guide-to-Fewer-Headaches-Better-Health-by-Carolyn-Bernstein.pdf
    • http://loaminoo.linkpc.net/1091098094095099098/Rad-Tech-s-Guide-to-MRI-Imaging-Procedures-Patient-Care-and-Safety-by-Carolyn-Kaut-Roth.pdf
    • http://loaminoo.linkpc.net/9093092096097/Memoirs-of-the-Soul-A-Writing-Guide-by-Nan-Merrick-Phifer.pdf
    • http://loaminoo.linkpc.net/1093090096098099/The-Diva-s-Guide-to-Selling-Your-Soul-by-Kathleen-O-39-Reilly.pdf
    • http://loaminoo.linkpc.net/7098097097091090/Everything-Is-Here-to-Help-You-A-Loving-Guide-to-Your-Soul-s-Evolution-by-Matt-Kahn.pdf
    • http://loaminoo.linkpc.net/3095093099097098/The-Writer-s-Guide-to-Psychology-How-to-Write-Accurately-about-Psychological-Disorders-Clinical-Treatment-and-Human-Behavior-by-Carolyn-Kaufman.pdf
    • http://loaminoo.linkpc.net/5092092099091097/Deep-in-the-Wave-A-Surfing-Guide-to-the-Soul-by-Bear-Woznick.pdf
    • http://loaminoo.linkpc.net/1092092098098092/Programming-PHP-by-Rasmus-Lerdorf.pdf
    • http://loaminoo.linkpc.net/1090095098091095095/A-Man-Called-Rasmus-by-JAMES-T-BORN.pdf
    • http://loaminoo.linkpc.net/2093095092098098/Rasmus-and-the-Vagabond-by-Astrid-Lindgren.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.