Malicious PDF — malware analysis report

Static analysis result for SHA-256 16cbd3488c627de0…

MALICIOUS

PDF

35.8 KB Created: 2019-04-30 04:28:18 +01:00 Authoring application: mPDF 5.7
MD5: 9a24e7c4d61ea06d2019ee03855d6b61 SHA-1: 63170a56c6ccaa41d5363c22a6ae517c187fc5da SHA-256: 16cbd3488c627de0bcd21bc1bcb5a80a8b3ad2151fbabeac031c6ea5feadec6a
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links pointing to a dynamic DNS domain, indicative of a link farm. The ML classifier also flagged this PDF as malicious. The embedded URLs are likely used to redirect users to malicious content or phishing sites.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9926

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2094094097092094/Bloody-Jack-Being-an-Account-of-the-Curious-Adventures-of-Mary-quot-Jacky-quot-Faber-Ship-s-Boy-Bloody-Jack-1-by-L-A-Meyer.pdf
    • http://loaminoo.linkpc.net/3098094091093/The-Wake-of-the-Lorelei-Lee-Being-an-Account-of-the-Adventures-of-Jacky-Faber-on-her-Way-to-Botany-Bay-Bloody-Jack-8-by-L-A-Meyer.pdf
    • http://loaminoo.linkpc.net/4090098095096/Viva-Jacquelina-Being-an-Account-of-the-Further-Adventures-of-Jacky-Faber-Over-the-Hills-and-Far-Away-Bloody-Jack-10-by-L-A-Meyer.pdf
    • http://loaminoo.linkpc.net/3097091093096/My-Bonny-Light-Horseman-Being-an-Account-of-the-Further-Adventures-of-Jacky-Faber-in-Love-and-War-Bloody-Jack-6-by-L-A-Meyer.pdf
    • http://loaminoo.linkpc.net/4094091093091/The-Mark-of-the-Golden-Dragon-Being-an-Account-of-the-Further-Adventures-of-Jacky-Faber-Jewel-of-the-East-Vexation-of-the-West-and-Pearl-of-the-South-China-Sea-Bloody-Jack-9-by-L-A-Meyer.pdf
    • http://loaminoo.linkpc.net/3098092097098/Curse-of-the-Blue-Tattoo-Being-an-Account-of-the-Misadventures-of-Jacky-Faber-Midshipman-and-Fine-Lady-Bloody-Jack-2-by-L-A-Meyer.pdf
    • http://loaminoo.linkpc.net/3097090093099094/Curse-of-the-Blue-Tattoo-Being-an-Account-of-the-Misadventures-of-Jacky-Faber-Midshipman-and-Fine-Lady-Bloody-Jack-2-by-Katherine-Kellgren.pdf
    • http://loaminoo.linkpc.net/9099099092090/The-First-Queen-of-England-The-Myth-of-quot-Bloody-Mary-quot-by-Linda-Porter.pdf
    • http://loaminoo.linkpc.net/3094098097094098/Bloody-Mary-Jack-Daniels-Mystery-2-by-J-A-Konrath.pdf
    • http://loaminoo.linkpc.net/1091092098090097097/Philosophische-Elemente-im-Werk-von-Max-Frisch-Grundph-nomene-menschlicher-Existenz-in-den-Romanen-quot-Stiller-quot-quot-Homo-faber-quot-und-quot-Mein-Name-sei-Gantenbein-quot-by-Frauke-Maria-Ho-.pdf
    • http://loaminoo.linkpc.net/8094097099097095/The-Black-Hand-The-Bloody-Rise-and-Redemption-of-quot-Boxer-quot-Enriquez-a-Mexican-Mob-Killer-by-Chris-Blatchford.pdf
    • http://loaminoo.linkpc.net/9097099095094095/Elfriede-Jelinek-in-der-Geschlechterpresse-quot-Die-Klavierspielerin-quot-und-quot-Lust-quot-im-printmedialen-Diskurs-by-Anja-Meyer.pdf
    • http://loaminoo.linkpc.net/4090098098093092/John-Barleycorn-quot-Alcoholic-Memoirs-quot-by-Jack-London.pdf
    • http://loaminoo.linkpc.net/9096097098094090/-quot-Dear-Genius-quot-A-Memoir-of-My-Life-with-Truman-Capote-by-Jack-Dunphy.pdf
    • http://loaminoo.linkpc.net/5094092093097099/Asterix-amp-Friends-quot-Asterix-the-Gladiator-quot-quot-Asterix-in-Switzerland-quot-quot-Mansions-of-the-Gods-quot-quot-Asterix-and-the-Laurel-Wreath-quot-quot-Obelix-and-Co-quot-by-Ren-Goscinny.pdf
    • http://loaminoo.linkpc.net/1090094090095094094/Vergleich-Der-Darstellung-Des-quot-Wunderbaren-quot-in-Johann-Hartliebs-quot-Alexanderroman-quot-Und-Gottfried-Von-Straburgs-quot-Tristan-quot-by-Katharina-Neuhaus.pdf
    • http://loaminoo.linkpc.net/8097096094092096/Zauberherz-und-Liebeswunder-Drei-Romane-in-einem-eBook-quot-Body-Switch-quot-quot-Hungry-for-Love-quot-und-quot-Von-M-usen-und-Million-ren-quot-by-Ashley-Bloom.pdf
    • http://loaminoo.linkpc.net/2098098092095097/The-Third-Inspector-Morse-Omnibus-quot-Last-Bus-to-Woodstock-quot-quot-Wench-Is-Dead-quot-quot-Jewel-That-Was-Ours-quot-by-Colin-Dexter.pdf
    • http://loaminoo.linkpc.net/1091096094095093098/Utopische-Prosa-ALS-L-Ngeres-Gedankenspiel-Untersuchungen-Zu-Arno-Schmidts-Theorie-Der-Modernen-Literatur-Und-Ihrer-Konkretisierung-in-quot-Schwarze-Spiegel-quot-quot-die-Gelehrtenrepublik-quot-Und-quot-Kaff-Auch-Mare-Crisium-quot-by-Boy-Hinrichs.pdf
    • http://loaminoo.linkpc.net/1091096094095093097/Der-Ausflug-Ins-Innere-Der-Eigenen-Personlichkeit-Zur-Funktion-Der-Zitate-Im-Werk-Arno-Schmidts-Am-Beispiel-Von-quot-Brand-s-Haide-quot-quot-Kaff-Auch-Mare-Crisium-quot-Und-quot-Zettel-s-Traum-quot-by-Wolfgang-Hink.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.