Malicious PDF — malware analysis report

Static analysis result for SHA-256 14adc73c31327649…

MALICIOUS

PDF

14.2 KB Created: 2019-04-30 04:08:30 +01:00 Authoring application: mPDF 5.7
MD5: c11745f69a9de31aec599c3a8614b015 SHA-1: ad0497f890636f693f72b04da41dbc9f3bf0541c SHA-256: 14adc73c3132764953cef4f3344d3503baa0ece16d37c4a2f4eeb53c9d10982f
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links pointing to external PDF files hosted on the domain 'loaminoo.linkpc.net'. This heuristic firing suggests a link farm or a method to distribute further malicious content. While no scripts were explicitly extracted, the ML classifier flagged the PDF as malicious, indicating a high probability of malicious intent. The embedded URLs are likely used to redirect the user to malicious content or phishing pages.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9102

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1094094099099/Run-Westy-Run-by-Gudrun-Alcock.pdf
    • http://loaminoo.linkpc.net/4090093093090093/The-Monster-Garden-by-Vivien-Alcock.pdf
    • http://loaminoo.linkpc.net/7094090094099097/A-Treatise-on-Cholera-by-Nathanael-Alcock.pdf
    • http://loaminoo.linkpc.net/8095095099094094/Blood-Relatives-by-Stevan-Alcock.pdf
    • http://loaminoo.linkpc.net/1090099098099096/The-Trial-of-Anna-Cotman-by-Vivien-Alcock.pdf
    • http://loaminoo.linkpc.net/2092095097097091/LIVIN-TO-DIE-a-gangsta-romance-story-by-Garvin-Alcock.pdf
    • http://loaminoo.linkpc.net/1098097099097096/In-a-Desert-Garden-Love-and-Death-among-the-Insects-by-John-Alcock.pdf
    • http://loaminoo.linkpc.net/9091096092099092/Der-Flug-by-Gudrun-Heller.pdf
    • http://loaminoo.linkpc.net/4093091094099095/The-Legend-of-Sigurd-amp-Gudr-n-by-J-R-R-Tolkien.pdf
    • http://loaminoo.linkpc.net/1091091094099097094/Bunte-Luftballons-by-Gudrun-Heller.pdf
    • http://loaminoo.linkpc.net/1090090095097095097/R-uber-Grapsch-in-der-Rosenlaube-Band-9-by-Gudrun-Pausewang.pdf
    • http://loaminoo.linkpc.net/1091095099098096092/Geschlecht-Literatur-Geschichte-by-Gudrun-Loster-Schneider.pdf
    • http://loaminoo.linkpc.net/9093098099090098/Wird-R-uber-Grapsch-ein-W-stenr-uber-by-Gudrun-Pausewang.pdf
    • http://loaminoo.linkpc.net/1090090095096097093/R-uber-Grapsch-Wir-lassen-uns-nicht-unterkriegen-Band-11-by-Gudrun-Pausewang.pdf
    • http://loaminoo.linkpc.net/1090090095096093093/Regine-und-der-Medizinmann-Reisebericht-bei-den-Mapuche-Indianern-in-Chile-by-Gudrun-Pausewang.pdf
    • http://loaminoo.linkpc.net/1090090095095099091/Rosinkawiese---damals-und-heute-Die-Rosinkawiesen-Trilogie-in-einem-Band-Rosinkawiese-1-3-by-Gudrun-Pausewang.pdf
    • http://loaminoo.linkpc.net/9098096090094093/Fokalisierungstypen-in-Kafkas-quot-Das-Urteil-quot-by-Gudrun-Kahles.pdf
    • http://loaminoo.linkpc.net/9098092092092094/Saiwala-Geschichten-Saiwala-erz-hlt-von-Zitronen-by-Gudrun-Grossbach.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.