Malicious PDF — malware analysis report

Static analysis result for SHA-256 1f62fcd27efe22fb…

MALICIOUS

PDF

18.9 KB Created: 2019-05-02 12:30:37 +01:00 Authoring application: mPDF 5.7
MD5: a2d77d99286c80b2dc7edfbf0a488c62 SHA-1: f67f9b7f03f6bea609199d0b17cb9ad5914bb4d9 SHA-256: 1f62fcd27efe22fb8a4872b919a3deed6f6672e6bafc747cdde0d24511fc4840
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file was flagged by a machine learning classifier as malicious. Static analysis revealed a large number of embedded URLs, forming a link farm. The primary heuristic indicates this is a PDF SEO link farm, suggesting the document's purpose is to drive traffic to external sites, likely for malicious purposes such as phishing or malware distribution.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9091099098093095/Illuminating-Video-An-Essential-Guide-to-Video-Art-by-Doug-Hall.pdf
    • http://loaminoo.linkpc.net/1091097090098098097/Erstellung-und-Vorteile-von-Video-Marketing-Professionelle-Video-Produktion-will-erkl-rt-sein-by-Ina-Schmid.pdf
    • http://loaminoo.linkpc.net/9091099097099095/The-Psychotronic-Video-Guide-To-Film-by-Michael-J-Weldon.pdf
    • http://loaminoo.linkpc.net/1091095093094099091/Video-Magazine-s-Guide-To-Component-Tv-by-Jayne-L-Schorn.pdf
    • http://loaminoo.linkpc.net/2097095095096098/Up-Up-Down-Down-Left-WRITE-The-Freelance-Guide-to-Video-Game-Journalism-by-Nathan-Meunier.pdf
    • http://loaminoo.linkpc.net/1091093096097092092/Penguin-Guide-to-Children-s-Television-amp-Video-by-Jack-Trotz-Frank-Livesley.pdf
    • http://loaminoo.linkpc.net/7096097094096090/Liste-de-Jeux-Video-Par-Genre-Liste-Chronologique-Des-Shoot-Them-Up-Liste-Chronologique-Des-Run-and-Gun-Liste-Chronologique-Des-Jeux-de-Tir-Au-Pistolet-Liste-Des-Jeux-Video-de-Saisons-de-Sport-Automobile-by-Source-Wikipedia.pdf
    • http://loaminoo.linkpc.net/9091099098093099/Video-Art-by-Sylvia-Martin.pdf
    • http://loaminoo.linkpc.net/9097094091094097/Video-Campaign-by-Lichter.pdf
    • http://loaminoo.linkpc.net/9091099096099098/Video-Rose-by-Jacqueline-Wilson.pdf
    • http://loaminoo.linkpc.net/3095097094097097/The-Last-Days-of-Video-by-Jeremy-Hawkins.pdf
    • http://loaminoo.linkpc.net/9091099098093097/Video-Girl-Ai-Vol-02-Mix-Down-by-Masakazu-Katsura.pdf
    • http://loaminoo.linkpc.net/8090092092094094/Video-Passeport-Francais-by-Brian-Hill.pdf
    • http://loaminoo.linkpc.net/9091099099092091/Video-Girl-Ai-Vol-05-Spinoff-by-Masakazu-Katsura.pdf
    • http://loaminoo.linkpc.net/7092098097093096/SATISFACTION-VIDEO-VOYEUSE-by-Macreen-Megan-D.pdf
    • http://loaminoo.linkpc.net/9091099099092090/A-Brief-History-of-Video-Games-by-Richard-Stanton.pdf
    • http://loaminoo.linkpc.net/9091099099092098/Video-Girl-Ai-Vol-07-Retake-by-Masakazu-Katsura.pdf
    • http://loaminoo.linkpc.net/9091099098094093/Video-Girl-Ai-Vol-03-Recall-by-Masakazu-Katsura.pdf
    • http://loaminoo.linkpc.net/5092091095091095/Language-Learning-with-Digital-Video-by-Ben-Goldstein.pdf
    • http://loaminoo.linkpc.net/4094092091092094/First-Dance-Vice-Virtue-amp-Video-0-5-by-Bianca-Giovanni.pdf
    • http://loaminoo.linkpc.net/1091093096097092092/Penguin-Guid

Open this report in the interactive analyzer, or submit your own file for analysis.