Malicious PDF — malware analysis report

Static analysis result for SHA-256 180414b8a47ba213…

MALICIOUS

PDF

14.7 KB Created: 2019-05-02 07:21:39 +01:00 Authoring application: mPDF 5.7
MD5: fa7ffff51b8ee949bfd9861536067ca1 SHA-1: 4ede9b9f9568fbefd296e3e2e18b34b6df7b262e SHA-256: 180414b8a47ba21313ccfa89a283026cf1d33c1fb6cff5fada985d24dcaf8b5d
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified as a link farm. While the URLs themselves are currently flagged as benign, the sheer volume and structure suggest a malicious intent, possibly for SEO manipulation or to host malicious content. The ML classifier also flagged this PDF as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9798

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9094096093094090/Halo-Encyclopedia-The-Definitive-Guide-to-the-Halo-Universe-by-Tobias-S-Buckell.pdf
    • http://loaminoo.linkpc.net/9094096093096097/HALO-Envoy-by-Tobias-S-Buckell.pdf
    • http://loaminoo.linkpc.net/5098099093093092/Halo-Tome-6-Le-protocole-Cole-by-Tobias-S-Buckell.pdf
    • http://loaminoo.linkpc.net/1092098095090091/Angel-s-Halo-Angel-s-Halo-MC-1-by-Terri-Anne-Browning.pdf
    • http://loaminoo.linkpc.net/2093091091098090/The-Executioness-by-Tobias-S-Buckell.pdf
    • http://loaminoo.linkpc.net/2093090095093096/Sly-Mongoose-Xenowealth-3-by-Tobias-S-Buckell.pdf
    • http://loaminoo.linkpc.net/7097093092095098/Universe-The-Definitive-Visual-Guide-by-Robert-Dinwiddie.pdf
    • http://loaminoo.linkpc.net/4099094096090092/Halo-by-Tom-Maddox.pdf
    • http://loaminoo.linkpc.net/9094096093097092/Halo-by-Chet-Day.pdf
    • http://loaminoo.linkpc.net/7094097096094091/The-Nostradamus-Encyclopedia-The-Definitive-Reference-Guide-to-the-Work-and-World-of-Nostradamus-by-Peter-Lemesurier.pdf
    • http://loaminoo.linkpc.net/2098095094095090/You-Had-Me-At-Halo-by-Amanda-Ashby.pdf
    • http://loaminoo.linkpc.net/4095099099096099/Devil-s-Halo-by-Lee-Brazil.pdf
    • http://loaminoo.linkpc.net/3095091093094090/Halo-by-Alexandra-Adornetto.pdf
    • http://loaminoo.linkpc.net/9094096093093097/The-Halo-Graphic-Novel-by-Lee-Hammock.pdf
    • http://loaminoo.linkpc.net/9094096094094094/Children-of-the-Halo-by-E-J-Spurrell.pdf
    • http://loaminoo.linkpc.net/9097090098097/The-Hunt-for-the-Healer-Halo-1-by-srs.pdf
    • http://loaminoo.linkpc.net/9091093096092090/Stimmen-aus-dem-Hexenreich-by-Halo-Summer.pdf
    • http://loaminoo.linkpc.net/6095098093093/Halo-of-the-Sun-Timeless-5-by-Laura-Kreitzer.pdf
    • http://loaminoo.linkpc.net/5094093090/The-Halo-Effect-by-Anne-D-LeClaire.pdf
    • http://loaminoo.linkpc.net/9094096093096099/Halo-Last-Light-by-Troy-Denning.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.