Malicious PDF — malware analysis report

Static analysis result for SHA-256 1d522e6c7545356c…

MALICIOUS

PDF

20.9 KB Created: 2019-04-29 23:30:58 +01:00 Authoring application: mPDF 5.7
MD5: c03c8d703ccfd36fbf184b238d6479f0 SHA-1: 7e4f104f8e43cb57b01223901bb39e579b461bd6 SHA-256: 1d522e6c7545356c34f4d967a3f1be0bbfb3932d4a26d0fd4f32ae6ac7bb7fe4
130 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains an embedded eval() call and a large number of external links, indicating a link farm designed to redirect users. The ML classifier also flagged this PDF as malicious. While no specific malware family is immediately identifiable, the technique suggests a downloader or redirector for further malicious payloads. The document body contains obfuscated text and URLs pointing to book titles, likely a lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 3

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • eval() call high PDF_EVAL
    eval() found — commonly used for obfuscated exploit execution (matched inside decoded stream)
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6091092099099/Objectivism-The-Philosophy-of-Ayn-Rand-by-Leonard-Peikoff.pdf
    • http://loaminoo.linkpc.net/1090097099092090096/Founders-of-Western-Philosophy-Thales-to-Hume-by-Leonard-Peikoff.pdf
    • http://loaminoo.linkpc.net/8093096092093091/The-Cause-of-Hitler-s-Germany-by-Leonard-Peikoff.pdf
    • http://loaminoo.linkpc.net/4090090092090/Philosophy-Who-Needs-It-by-Ayn-Rand.pdf
    • http://loaminoo.linkpc.net/3093090090098092/Why-Businessmen-Need-Philosophy-by-Ayn-Rand.pdf
    • http://loaminoo.linkpc.net/6095093094099098/The-Early-Ayn-Rand-A-Selection-from-Her-Unpublished-Fiction-by-Ayn-Rand.pdf
    • http://loaminoo.linkpc.net/9098091096098098/Rand-McNally-streets-amp-highways-of-Chicagoland-by-Rand-McNally-and-Company.pdf
    • http://loaminoo.linkpc.net/6095093094091099/Introduction-to-the-Philosophy-of-History-with-Selections-from-The-Philosophy-of-Right-by-Georg-Wilhelm-Friedrich-Hegel.pdf
    • http://loaminoo.linkpc.net/9095094097097092/The-Philosophy-of-Computer-Games-7-Philosophy-of-Engineering-and-Technology-by-John-Richard-Sageng.pdf
    • http://loaminoo.linkpc.net/1090094095091094097/Philosophy-in-the-Islamic-World-A-History-of-Philosophy-Without-Any-Gaps-3-by-Peter-Adamson.pdf
    • http://loaminoo.linkpc.net/1090094095090097099/Classical-Philosophy-A-History-of-Philosophy-Without-Any-Gaps-1-by-Peter-Adamson.pdf
    • http://loaminoo.linkpc.net/9092095097095094/Stephen-Colbert-and-Philosophy-I-Am-Philosophy-by-Aaron-Allen-Schiller.pdf
    • http://loaminoo.linkpc.net/3094095092099090/The-Ultimate-Star-Wars-and-Philosophy-You-Must-Unlearn-What-You-Have-Learned-The-Blackwell-Philosophy-and-Pop-Culture-Series-by-Jason-T-Eberl.pdf
    • http://loaminoo.linkpc.net/8094091091091094/Kierkegaard-s-Influence-on-Philosophy-Francophone-Philosophy-by-Jon-Stewart.pdf
    • http://loaminoo.linkpc.net/4090090099090099/Ur-of-the-Chaldees-A-Revised-and-Updated-Edition-of-Sir-Leonard-Woolley-s-Excavations-at-Ur-by-Leonard-Woolley.pdf
    • http://loaminoo.linkpc.net/5094098093094094/Leonard-Cohen-on-Leonard-Cohen-Interviews-and-Encounters-by-Jeff-Burger.pdf
    • http://loaminoo.linkpc.net/7095090095091/The-Complete-Western-Stories-of-Elmore-Leonard-by-Elmore-Leonard.pdf
    • http://loaminoo.linkpc.net/1090098097090090/Writing-Philosophy-A-Student-s-Guide-to-Writing-Philosophy-Essays-by-Lewis-Vaughn.pdf
    • http://loaminoo.linkpc.net/1090098094096090095/A-New-History-of-Philosophy-Ancient-and-Medieval-A-New-History-of-Philosophy-1-by-Wallace-Matson.pdf
    • http://loaminoo.linkpc.net/9092090092097092/Philosophy-of-Science-The-Link-Between-Science-and-Philosophy-by-Philipp-Frank.pdf
    • http://loaminoo.linkpc.net/6095093094091099/Introduction-to-the-Philosophy-of-History-with-Selections-from-The-Philosophy-of-Right-by-Georg-Wilhelm-

Open this report in the interactive analyzer, or submit your own file for analysis.