Malicious PDF — malware analysis report

Static analysis result for SHA-256 1d65b8786954725e…

MALICIOUS

PDF

18.1 KB Created: 2019-04-30 04:12:16 +01:00 Authoring application: mPDF 5.7 First seen: 2021-04-10
MD5: 6fdc8f462a07a031e5e24df87bb5e9fc SHA-1: d4969abfc4a7ce48b838b5593659ce0263b259f4 SHA-256: 1d65b8786954725e5cdd3dd2de2f10eccbfa722eef0a7120efb248f98678da72
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9097095096090094/After-the-Revolution-and-4000-Miles-Two-Plays-by-Amy-Herzog.pdf In PDF document text
    • http://loaminoo.linkpc.net/9097095096093099/After-the-Revolution-by-Amy-Herzog.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9097095095099091/Sex-in-Crisis-The-New-Sexual-Revolution-and-the-Future-of-American-Politics-by-Dagmar-Herzog.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9098090091095092/Two-Plays-of-the-French-Revolution-The-Fourteenth-of-July-and-Danton-by-Romain-Rolland.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9097095096098092/Images-at-the-Horizon-A-Workshop-with-Werner-Herzog-by-Werner-Herzog.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2095096093095098/500-Miles-500-Miles-1-An-MLR-Mixed-Tape-by-Parker-Williams.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1091098092099090/Fred-Herzog-Photographs-by-Fred-Herzog.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9097091092097097/Fast-Horse-Plays-Round-One-A-Collection-of-One-Act-Plays-and-Poetry-by-Angeline-Brom.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6094098090095/Short-Plays-to-Long-Remember-An-Eclectiic-Collection-of-Plays-by-Francine-L-Trevens.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8098091099098097/The-Greek-Plays-Sixteen-Plays-by-Aeschylus-Sophocles-and-Euripides-by-Mary-Lefkowitz.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4099094095092098/The-Collected-Plays-Vol-1-The-Early-Plays-1936-1952-by-Terence-Rattigan.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4099094092098098/The-Collected-Plays-Vol-2-The-Later-Plays-1953-1977-by-Terence-Rattigan.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1092094097096096/900-Miles-900-Miles-1-by-S-Johnathan-Davis.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7094099099093096/Citations-et-D-veloppement-personnel-Plus-de-4000-citations-parmi-les-meilleures-by-Patricia-Flandre.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1091097097096099098/Fachbegriffe-Der-Elektronik-Telekommunikation-Und-Computertechnik-4000-Fachbegriffe-Bezeichnungen-Und-Abkurzungen-Kurz-Und-Bundig-Erklart-by-Ulrich-Freyer.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9097095095091094/Belleville-by-Amy-Herzog.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9097095096093092/The-Great-God-Pan-by-Amy-Herzog.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1092099090093091/Mimi-Power-and-the-I-Don-t-Know-What-by-Victoria-Miles-by-Victoria-Miles.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7096099099095/Vive-la-Revolution-A-Stand-up-History-of-the-French-Revolution-by-Mark-Steel.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3097092097096091/Herzog-by-Saul-Bellow.pdfIn PDF document text