Malicious PDF — malware analysis report

Static analysis result for SHA-256 1c974db8af7cf6b3…

MALICIOUS

PDF

26.0 KB Created: 2019-04-29 23:07:41 +01:00 Authoring application: mPDF 5.7
MD5: abc149f730bb9535cfaac3cd71a95223 SHA-1: fc6456d3639bb0bb67c23abc036f8cff47d6e088 SHA-256: 1c974db8af7cf6b31e9fd4a7786e0f659430385a69da554e508f399e238d2e69
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. While the specific URLs appear benign, the sheer volume and the ML classifier's high confidence score suggest a malicious intent, likely for SEO manipulation or to distribute further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.n
    • http://loaminoo.linkpc.net/4093092095090/Rich-Dad-s-Guide-to-Investing-What-the-Rich-Invest-in-That-the-Poor-and-Middle-Class-Do-Not-by-Robert-T-Kiyosaki.pdf
    • http://loaminoo.linkpc.net/3093090097097097/Rich-Dad-s-Guide-to-Becoming-Rich-Without-Cutting-Up-Your-Credit-Cards-by-Robert-T-Kiyosaki.pdf
    • http://loaminoo.linkpc.net/3093094092090/Rich-Dad-Poor-Dad-by-Robert-T-Kiyosaki.pdf
    • http://loaminoo.linkpc.net/5093094096094/Rich-Dad-s-Retire-Young-Retire-Rich-How-to-Get-Rich-Quickly-and-Stay-Rich-Forever-by-Robert-T-Kiyosaki.pdf
    • http://loaminoo.linkpc.net/4097090094090095/Rich-Dad-Poor-Dad-for-Teens-The-Secrets-about-Money--That-You-Don-t-Learn-in-School-by-Robert-T-Kiyosaki.pdf
    • http://loaminoo.linkpc.net/1099097090095096/Rich-Dad-s-Before-You-Quit-Your-Job-10-Real-Life-Lessons-Every-Entrepreneur-Should-Know-About-Building-a-Multimillion-Dollar-Business-by-Robert-T-Kiyosaki.pdf
    • http://loaminoo.linkpc.net/3093090097097096/Rich-Dad-s-Success-Stories-Real-Life-Success-Stories-from-Real-Life-People-Who-Followed-the-Rich-Dad-Lessons-by-Robert-T-Kiyosaki.pdf
    • http://loaminoo.linkpc.net/4092093093095097/Winner-Take-All-Politics-How-Washington-Made-the-Rich-Richer--and-Turned-Its-Back-on-the-Middle-Class-by-Jacob-S-Hacker.pdf
    • http://loaminoo.linkpc.net/4094096096096/Rich-Man-Poor-Man-by-Irwin-Shaw.pdf
    • http://loaminoo.linkpc.net/2093095096099097/The-Poor-Little-Rich-Girl-by-Eleanor-Gates.pdf
    • http://loaminoo.linkpc.net/2095096095097091/Culture-and-Prosperity-Why-Some-Nations-Are-Rich-but-Most-Remain-Poor-by-John-Kay.pdf
    • http://loaminoo.linkpc.net/1091094092096095096/Grow-rich-with-diamonds-Investing-in-the-world-s-most-precious-gems-by-Bernhard-Dohrmann.pdf
    • http://loaminoo.linkpc.net/1094097090090093/The-Poor-Rich-Girl-The-Arabella-Academy-Chronicles-1-by-Ashley-Gallegos.pdf
    • http://loaminoo.linkpc.net/2093094094094099/Culture-and-Prosperity-The-Truth-About-Markets---Why-Some-Nations-Are-Rich-but-Most-Remain-Poor-by-John-Kay.pdf
    • http://loaminoo.linkpc.net/1096099090092098/The-Rich-and-the-Super-Rich-A-Study-in-the-Power-of-Money-Today-by-Ferdinand-Lundberg.pdf
    • http://loaminoo.linkpc.net/2092098093092095/Serendipitously-Rich-How-to-Get-Delightfully-Delectably-Deliciously-Rich-or-Anything-Else-You-Want-in-7-Ridiculously-Easy-Steps-by-Madeleine-Kay.pdf
    • http://loaminoo.linkpc.net/6099091094099092/The-Big-Spenders-The-Epic-Story-of-the-Rich-Rich-the-Grandees-of-America-and-the-Magnificoes-and-How-They-Spent-Their-Fortunes-by-Lucius-Beebe.pdf
    • http://loaminoo.linkpc.net/4099098097096095/Rich-Boy-Growing-Pains-Rich-Boy-2-by-Dan-Kirk.pdf
    • http://loaminoo.linkpc.net/5098095094091/Get-Rich-Lucky-Bitch-Release-Your-Money-Blocks-and-Live-a-First-Class-Life-by-Denise-Duffield-Thomas.pdf
    • http://loaminoo.linkpc.net/2096097090090096/Dirty-Rich-Cinderella-Story-Dirty-Rich-2-by-Lisa-Renee-Jones.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.