Malicious PDF — malware analysis report

Static analysis result for SHA-256 1588e20a797db8fe…

MALICIOUS

PDF

19.0 KB Created: 2019-04-30 02:37:17 +01:00 Authoring application: mPDF 5.7 First seen: 2021-04-01
MD5: 6e6b0a047bb69fae9c2a3251d5d9c84a SHA-1: 696766c817a7729963c5391211990ed66dec7676 SHA-256: 1588e20a797db8fed4e9aad7184746eeb122891cfa7a6937c5287a509ae3fafd
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9912

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2096096090095093/Null-States-Book-Two-of-the-Centenal-Cycle-by-Malka-Ann-Older.pdf In PDF document text
    • http://loaminoo.linkpc.net/7090092093094093/Null-States-The-Centenal-Cycle-2-by-Malka-Ann-Older.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2091099097092095/Infomocracy-The-Centenal-Cycle-1-by-Malka-Ann-Older.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7090092093094095/State-Tectonics-The-Centenal-Cycle-3-by-Malka-Ann-Older.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7090092093096094/Tear-Tracks-by-Malka-Ann-Older.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7090092095092098/Assassination-Born-to-the-Blade-1-9-by-Malka-Ann-Older.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090097091097093091/Tales-from-Null-City-From-the-World-of-Null-City-Book-3-by-Barb-Taub.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7090092095093092/Sukkot-A-Time-to-Rejoice-A-Jewish-Holidays-Book-Drucker-Malka-Jewish-Holidays-Book-by-Malka-Drucker.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090097091095098099/Null-Null-Siebzig-Mord-in-Hangzhou-by-Marlies-Ferber.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3098090095090094/Barbarians-of-Malka-Barbarians-of-Malka-5-by-Justus-Roux.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090097091095098096/Gary-Null-s-Power-Aging-by-Gary-Null.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1091092097098099099/The-Raven-Cycle-4-Book-Series-by-Maggie-Stiefvater.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5095095096098/Redeye-Book-Two-of-the-Wonderland-Cycle-by-Michael-Shean.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2098095093092096/The-Confusion-Part-I-The-Baroque-Cycle-Vol-2-Book-1-by-Neal-Stephenson.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6091091097098094/The-Confusion-Part-II-The-Baroque-Cycle-Vol-2-Book-2-by-Neal-Stephenson.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4097094096095092/The-White-Tree-The-Cycle-of-Arawn-Book-I-by-Edward-W-Robertson.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8099095091091092/The-Magic-School-Bus-Wet-All-Over-A-Book-About-The-Water-Cycle-by-Patricia-Relf.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1097095096092096/The-Buddha-of-Lightning-Peak-Cycle-of-the-Sky-Book-2-by-Yudron-Wangmo.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2092097097095096/Cycle-of-Rice-Cycle-of-Life-A-Story-of-Sustainable-Farming-by-Jan-Reynolds.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8095092098091096/In-the-United-States-Circuit-Court-of-Appeals-for-the-Ninth-Circuit-United-States-of-America-Appellant-vs-Emery-J-Lesher-Appelle-Transcript-of-Record-Upon-Appeal-from-the-United-States-District-Court-for-the-District-of-Oregon-by-United-States-Court-of-Appeals.pdfIn PDF document text