Malicious PDF — malware analysis report

Static analysis result for SHA-256 2664ea31e428b322…

MALICIOUS

PDF

26.4 KB Created: 2019-04-30 02:42:11 +01:00 Authoring application: mPDF 5.7
MD5: b231279b8147579b1c3cb7bba34bb7fb SHA-1: b8c06cd895bcfc288ebb12a12d7e88bccba50fbf SHA-256: 2664ea31e428b322f12de0f16cb4f83c346722c7b2f93876e3ff6fcc4eed18e2
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDF documents, a technique often used for SEO manipulation or to distribute malicious content. The heuristic PDF_SEO_LINK_FARM specifically identified this behavior, flagging a mass external PDF link farm. While the document body is heavily corrupted, the presence of numerous links to the 'loaminoo.linkpc.net' domain suggests a coordinated effort to direct users to potentially harmful content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091097094095090094/Annotated-bibliography-of-bog-lemmings-by-James-D-Reichel.pdf
    • http://loaminoo.linkpc.net/8090090094093094/Cretinism-A-Medical-Dictionary-Bibliography-and-Annotated-Research-Guide-to-Internet-References-by-James-N-Parker.pdf
    • http://loaminoo.linkpc.net/1091094099091096099/The-Last-of-the-Mohicans-A-Narrative-of-1757---also-includes-an-annotated-bibliography-and-research-guide-to-works-on-Indians-of-North-America-by-James-Fenimore-Cooper.pdf
    • http://loaminoo.linkpc.net/5096096095094097/Thrips-Palmi-A-Literature-Survey-With-An-Annotated-Bibliography-by-D-J-Girling.pdf
    • http://loaminoo.linkpc.net/1090090093095093096/Elias-L-nnrot-And-His-Kalevala-A-Selective-Annotated-Bibliography-With-An-Introduction-To-The-National-Epic-Of-Finland-by-Elemer-Bako.pdf
    • http://loaminoo.linkpc.net/6097091092097099/Frankenstein-or-the-Modern-Prometheus---also-includes-an-annotated-bibliography-on-select-works-of-Science-Fiction-by-Mary-Wollstonecraft-Shelley.pdf
    • http://loaminoo.linkpc.net/5094091096095099/HEART-OF-DARKNESS-Introduction-by-Harold-Bloom-Annotated-and-Illustrated-by-Ken-Everett-With-Author-Biography-and-Bibliography-by-Joseph-Conrad.pdf
    • http://loaminoo.linkpc.net/1090095090093093098/Gathering-in-the-City-An-Annotated-Bibliography-and-Review-of-the-Literature-about-Human--Plant-Interactactions-Interactions-in-Urban-Ecosystems-by-McLain.pdf
    • http://loaminoo.linkpc.net/6094091092095095/Jungian-Literary-Criticism-1920-1980-An-Annotated-Critical-Bibliography-of-Works-in-English-with-a-Selection-of-Titles-After-1980-by-Jos-Van-Meurs.pdf
    • http://loaminoo.linkpc.net/1090096091090098098/American-Literature-Volume-2-Third-Edition-and-with-D-and-Bibliography-and-Huck-and-James-American-by-Lauter.pdf
    • http://loaminoo.linkpc.net/1091094090098094097/Annotated-Guide---RN-to-the-Texas-Nursing-Practice-ACT-11th-Edition-2013-by-James-Willmann.pdf
    • http://loaminoo.linkpc.net/5094099090093099/Ulysses-Annotated-Characters-Analysis-Themes-Motifs-Symbols-amp-Study-Questions-by-James-Joyce.pdf
    • http://loaminoo.linkpc.net/1090096097091091092/The-True-Story-of-Andersonville-Prison-A-Defense-of-Major-Henry-Wirz-Annotated-by-James-Madison-Page.pdf
    • http://loaminoo.linkpc.net/9091091096094095/Die-Feinde-der-Freiheit-by-Werner-Reichel.pdf
    • http://loaminoo.linkpc.net/1090093094099091091/Lemmings-by-Ann-O-Squire.pdf
    • http://loaminoo.linkpc.net/9095093091091093/Babaji-spricht-Prophezeiungen-und-Lehren-by-Gertraud-Reichel.pdf
    • http://loaminoo.linkpc.net/1091097094095090097/The-Lemmings-and-Other-Mysteries-by-Alec-Skiffington.pdf
    • http://loaminoo.linkpc.net/1090093095090092099/The-Biology-Of-Lemmings-by-Nils-Chr-Stenseth.pdf
    • http://loaminoo.linkpc.net/1090093095090092097/Irksome-Lemmings-by-Theppin-Sayers.pdf
    • http://loaminoo.linkpc.net/9091097097096092/Leinenrambo-Positiv-trainieren---entspannt-spazieren-by-Sabrina-Reichel.pdf
    • http://loaminoo.linkpc.net/1090090093095093096/Elias-L-nnrot-And-His-Kalevala-A-Selective-Annotated-Bibliography-With-An-Introduction-To-The-National-Epic-Of-Finland-by-Elemer-Bako

Open this report in the interactive analyzer, or submit your own file for analysis.