Malicious PDF — malware analysis report

Static analysis result for SHA-256 1aa904d59509bfe0…

MALICIOUS

PDF

23.9 KB Created: 2019-04-29 23:18:21 +01:00 Authoring application: mPDF 5.7
MD5: 1fbbecb55294356ccc2163bcdee99f25 SHA-1: a7a3f167bbce23ff38ca539286a27ad988167021 SHA-256: 1aa904d59509bfe01a43f33e5739f96ed80eedabf49092fdc2e8eee4a2144647
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 User Execution: Malicious File

The PDF contains a large number of embedded links to external PDF files, a technique often used for SEO manipulation or to distribute malicious content. The ML classifier strongly indicated maliciousness. While no scripts were extracted, the PDF structure and embedded URL farm suggest a malicious intent to redirect users to potentially harmful content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9901

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090092097090095/Losing-the-Signal-The-Untold-Story-Behind-the-Extraordinary-Rise-and-Spectacular-Fall-of-BlackBerry-by-Jacquie-McNish.pdf
    • http://loaminoo.linkpc.net/5095094092090096/How-the-Irish-Saved-Civilisation-The-Untold-Story-of-Ireland-s-Heroic-Role-from-the-Fall-of-Rome-to-the-Rise-of-Medieval-Europe-by-Thomas-Cahill.pdf
    • http://loaminoo.linkpc.net/6095090092/The-Templars-The-Rise-and-Spectacular-Fall-of-God-s-Holy-Warriors-by-Dan-Jones.pdf
    • http://loaminoo.linkpc.net/1096098092091/The-Man-in-the-Rockefeller-Suit-The-Astonishing-Rise-and-Spectacular-Fall-of-a-Serial-Impostor-by-Mark-Seal.pdf
    • http://loaminoo.linkpc.net/5090094098091094/American-Pharoah-The-Untold-Story-of-the-Triple-Crown-Winner-s-Legendary-Rise-by-Joe-Drape.pdf
    • http://loaminoo.linkpc.net/3098098097094095/Mutiny-at-Fort-Jackson-The-Untold-Story-of-the-Fall-of-New-Orleans-by-Michael-D-Pierson.pdf
    • http://loaminoo.linkpc.net/4098096098098092/A-Kim-Jong-Il-Production-The-Extraordinary-True-Story-of-a-Kidnapped-Filmmaker-His-Star-Actress-and-a-Young-Dictator-s-Rise-to-Power-by-Paul-Fischer.pdf
    • http://loaminoo.linkpc.net/2099096/A-Kim-Jong-Il-Production-The-Extraordinary-True-Story-of-a-Kidnapped-Filmmaker-His-Star-Actress-and-a-Young-Dictator-s-Rise-to-Power-by-Paul-Fischer.pdf
    • http://loaminoo.linkpc.net/1090091095097098/The-Middle-Ages-From-the-Fall-of-Rome-to-the-Rise-of-the-Renaissance-The-Story-of-the-World-2-by-Susan-Wise-Bauer.pdf
    • http://loaminoo.linkpc.net/2093098096099096/The-Rise-of-the-Indian-Rope-Trick-How-a-Spectacular-Hoax-Became-History-by-Peter-Lamont.pdf
    • http://loaminoo.linkpc.net/4097094094098098/A-Doll-s-Story-The-fall-and-rise-of-Merr-StahlRhune-by-Lez-Lewis-by-Lez-Lewis.pdf
    • http://loaminoo.linkpc.net/9094099090091/A-Sea-Story-The-Untold-Story-of-the-U-S-Navy-Response-to-9-11-by-Joseph-Pignataro.pdf
    • http://loaminoo.linkpc.net/2099095098092093/Labor-s-Untold-Story-The-Adventure-Story-of-the-Battles-Betrayals-and-Victories-of-American-Working-Men-and-Women-by-Richard-O-Boyer.pdf
    • http://loaminoo.linkpc.net/1091090095096091/Mermaid-Queen-The-Spectacular-True-Story-Of-Annette-Kellerman-Who-Swam-Her-Way-To-Fame-Fortune-Swimsuit-History-by-Shana-Corey.pdf
    • http://loaminoo.linkpc.net/7095090091095096/The-Rise-and-Fall-of-the-Dil-Pickle-by-Franklin-Rosemont.pdf
    • http://loaminoo.linkpc.net/2096097092093099/The-Rise-and-Fall-of-the-House-of-Windsor-by-A-N-Wilson.pdf
    • http://loaminoo.linkpc.net/2097096094091091/The-Rise-amp-Fall-of-Great-Powers-by-Tom-Rachman.pdf
    • http://loaminoo.linkpc.net/3091095094/Let-the-Wind-Rise-Sky-Fall-3-by-Shannon-Messenger.pdf
    • http://loaminoo.linkpc.net/2092093096091097/Rise-amp-Fall-Thirds-4-by-Charlie-Cochet.pdf
    • http://loaminoo.linkpc.net/4090090097092094/Gorbachev-The-Rise-and-Fall-of-a-Hero-by-I-D-Oppenhiem.pdf
    • http://loaminoo.linkpc.net/1096098092091/The

Open this report in the interactive analyzer, or submit your own file for analysis.