Malicious PDF — malware analysis report

Static analysis result for SHA-256 2284fdecc3684353…

MALICIOUS

PDF

22.5 KB Created: 2019-04-30 02:06:24 +01:00 Authoring application: mPDF 5.7
MD5: e8c072451f777334806d6b6ae00b4ec9 SHA-1: b48220a1f715226b092687aa3c394bf287d3a6e9 SHA-256: 2284fdecc368435308cb5e793e252d0ba2e09756cb07bef9a5f5e59105587f7a
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML_NYX_PDF_MALICIOUS heuristic also flagged the document with high confidence. The embedded links, predominantly hosted on 'loaminoo.linkpc.net', suggest a link farm or redirection scheme designed to lead users to potentially malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9903

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8092091094096/Jornada-Dos-Anjos-Portuguese-by-Sandra-Carneiro.pdf
    • http://loaminoo.linkpc.net/1090092090095091090/Mini-Michaelis-Dicionario-English-Portuguese-Portuguese-English-by-Michaelis.pdf
    • http://loaminoo.linkpc.net/7097099093094/A-Menina-do-Sobrado-by-Cyro-dos-Anjos.pdf
    • http://loaminoo.linkpc.net/1090095096098092090/Uma-jornada-rumo-ao-desconhecido-by-Gabriel-Soares.pdf
    • http://loaminoo.linkpc.net/9099091094095093/The-Bonfire-by-Cecilio-J-Carneiro.pdf
    • http://loaminoo.linkpc.net/6092093094099098/Como-emagrecer-e-permanecer-magra-Tr-ade-do-emagrecimento-by-Josman-Lucas-Carneiro.pdf
    • http://loaminoo.linkpc.net/5098090090092095/Ang-lica-Cativa-no-Har-m-Ang-lica-Marquesa-dos-Anjos-8-by-Anne-Golon.pdf
    • http://loaminoo.linkpc.net/7099095094098096/A-Jornada-do-Assassino-O-Regresso-do-Assassino-4-by-Robin-Hobb.pdf
    • http://loaminoo.linkpc.net/1091093092094096093/Sonnets-from-the-Portuguese-by-Elizabeth-Barrett-Browning.pdf
    • http://loaminoo.linkpc.net/5092092092098094/Our-Lady-of-the-Artichokes-and-Other-Portuguese-American-Stories-by-Katherine-Vaz.pdf
    • http://loaminoo.linkpc.net/5099097097090099/Phoenix-Portuguese-Voyages-1498-1663-Tales-from-the-Great-Age-of-Discovery-by-C-D-Ley.pdf
    • http://loaminoo.linkpc.net/2097092091094090/Unusual-Uses-for-Olive-Oil-Portuguese-Irregular-Verbs-4-by-Alexander-McCall-Smith.pdf
    • http://loaminoo.linkpc.net/1091096090095090/Letters-of-a-Portuguese-Nun-Uncovering-the-Mystery-Behind-a-17th-Century-Forbidden-Love-by-Myriam-Cyr.pdf
    • http://loaminoo.linkpc.net/8094090092097093/Homenagem-a-Alexandrino-Severino-Essays-on-the-Portuguese-Speaking-World-by-Marshall-C-Eakin.pdf
    • http://loaminoo.linkpc.net/5099097098092096/Portuguese-Cochin-and-the-Maritime-Trade-of-India-1500-1663-by-Pius-Malekandathil.pdf
    • http://loaminoo.linkpc.net/5090096093091094/Hebrews-of-the-Portuguese-Nation-Conversos-and-Community-in-Early-Modern-Amsterdam-by-Miriam-Bodian.pdf
    • http://loaminoo.linkpc.net/5090097099095097/-quot-Culture-quot-and-Culture-Traditional-Knowledge-and-Intellectual-Rights-by-Manuela-Carneiro-da-Cunha.pdf
    • http://loaminoo.linkpc.net/7099098097092095/Portugal-s-Guerrilla-Wars-in-Africa-Lisbon-s-Three-Wars-in-Angola-Mozambique-and-Portuguese-Guinea-1961-74-by-Al-J-Venter.pdf
    • http://loaminoo.linkpc.net/2098093098093/Sea-Road-to-the-Indies-An-Account-of-the-Voyages-and-Exploits-of-the-Portuguese-Navigators-Together-with-the-Life-and-Times-of-Dom-Vasco-Da-Gama-Capitao-Mor-Viceroy-of-India-and-Count-of-Vidigueira-by-Henry-Hersch-Hart.pdf
    • http://loaminoo.linkpc.net/9090099094091093/Koalas-by-Sandra-Lee.pdf
    • http://loaminoo.linkpc.net/7099095094098096/A-Jornada-do-Assassino-O-Regresso-d

Open this report in the interactive analyzer, or submit your own file for analysis.