Malicious PDF — malware analysis report

Static analysis result for SHA-256 19e8c703c5bc5bd1…

MALICIOUS

PDF

14.0 KB Created: 2019-05-01 19:43:36 +01:00 Authoring application: mPDF 5.7
MD5: cecd1b56ae52a395d0e81a744a6a824f SHA-1: d625b902cbafa5a25ad1270930cb450ccc05086d SHA-256: 19e8c703c5bc5bd1161ed8abb2d314f1ce8aa4cb82a58f73c5641a7b976c3ddf
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO manipulation or to distribute further malicious content. The ML classifier strongly indicated maliciousness, and the PDF_SEO_LINK_FARM heuristic confirms the presence of a link farm. The document body, though heavily obfuscated, contains URLs that are also present in the link farm.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9798

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4092093091090091/One-Piece-Romance-Dawn-One-Piece-1-by-Eiichiro-Oda.pdf
    • http://loaminoo.linkpc.net/4097092092097099/One-Piece-Volume-05-For-Whom-the-Bell-Tolls-One-Piece-5-by-Eiichiro-Oda.pdf
    • http://loaminoo.linkpc.net/5090093093090097/One-Piece-East-Blue-1-2-3-Vol-1-One-Piece-Omnibus-1-by-Eiichiro-Oda.pdf
    • http://loaminoo.linkpc.net/4094090098096092/One-Piece-Volume-55-A-Ray-of-Hope-One-Piece-55-by-Eiichiro-Oda.pdf
    • http://loaminoo.linkpc.net/4091092098091091/One-Piece-Box-Set-2-Skypiea-and-Water-Seven-Volumes-24-46-by-Eiichiro-Oda.pdf
    • http://loaminoo.linkpc.net/8094091098091095/Piece-by-Piece-Remembering-Georgina-A-Mother-s-Memoir-by-Helen-Anderson.pdf
    • http://loaminoo.linkpc.net/3092090094095099/Piece-By-Piece-Stories-About-Fitting-Into-Canada-by-Teresa-Toten.pdf
    • http://loaminoo.linkpc.net/4099096094096090/Joy-Division-Piece-by-Piece-by-Paul-Morley.pdf
    • http://loaminoo.linkpc.net/6096091096099094/POS-Piece-of-Sh-t-by-Pierre-Paquet.pdf
    • http://loaminoo.linkpc.net/4098097094097098/Losing-a-Piece-of-Me-by-K-B-Andrews.pdf
    • http://loaminoo.linkpc.net/4092093093095090/The-Missing-Piece-by-Lee-Ezell.pdf
    • http://loaminoo.linkpc.net/1097094098095093/Piece-of-Heaven-by-Sammie-J-.pdf
    • http://loaminoo.linkpc.net/4094094090097098/A-Cat-a-Hat-and-a-Piece-of-String-by-Joanne-Harris.pdf
    • http://loaminoo.linkpc.net/2099091098090098/Missing-Piece-by-Claudia-Black.pdf
    • http://loaminoo.linkpc.net/2092090094093099/Every-Little-Piece-Second-Chances-1-by-Kate-Ashton.pdf
    • http://loaminoo.linkpc.net/1098096099095096/Asylum-Piece-by-Anna-Kavan.pdf
    • http://loaminoo.linkpc.net/7098095091092094/Piece-Heroique-by-C-sar-Franck.pdf
    • http://loaminoo.linkpc.net/7099098092098096/A-Piece-of-You-Sami-Rizzo-3-by-D-M-Annechino.pdf
    • http://loaminoo.linkpc.net/3094091093092097/Piece-of-My-Heart-by-Julia-Watts.pdf
    • http://loaminoo.linkpc.net/1092093094099095/Piece-of-Tail-by-Celia-Kyle.pdf
    • http://loaminoo.linkpc.net/4092093093095090/The-Missing-P

Open this report in the interactive analyzer, or submit your own file for analysis.