Malicious PDF — malware analysis report

Static analysis result for SHA-256 26ecfd5017b0e306…

MALICIOUS

PDF

17.7 KB Created: 2019-05-05 16:06:42 +01:00 Authoring application: mPDF 5.7 First seen: 2021-04-10
MD5: f57e2ff5f331affbbf6917ef06553e2f SHA-1: 93298e6e606aa7c4a206ba2c27ff7d777c8fdc1f SHA-256: 26ecfd5017b0e306b76dd7bdafa33ee8b9db0c727fbd5b7d38f91bd9d0088209
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4094094091097099/The-Dark-Warrior-Series-The-Complete-Collection-Contains-Midnight-s-Master-Midnight-s-Lover-Midnight-s-Seduction-Midnight-s-Warrior-Midnight-s-Kiss-Surrender-novella-Dark-Warriors-by-Donna-Grant.pdf In PDF document text
    • http://loaminoo.linkpc.net/1093091098096096/Midnight-s-Warrior-Dark-Warriors-4-by-Donna-Grant.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1093091092098096/Midnight-s-Seduction-Dark-Warriors-3-by-Donna-Grant.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090091092098095096/A-Warrior-s-Heart-The-Shields-5-by-Donna-Grant.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3097097090098093/Hot-Blooded-Dark-Kings-4-by-Donna-Grant.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2093091093094093/Dark-Alpha-s-Demand-Reaper-3-by-Donna-Grant.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3097097090098099/Untamed-Highlander-Dark-Sword-4-by-Donna-Grant.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1094095099098091/Wicked-Highlander-Dark-Sword-3-by-Donna-Grant.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1097093096097098/Dangerous-Highlander-Dark-Sword-1-by-Donna-Grant.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5090098098093/Darkest-Highlander-Dark-Sword-6-by-Donna-Grant.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3097097090099091/Shadow-Highlander-Dark-Sword-5-by-Donna-Grant.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2097099095098092/Bound-to-a-Warrior-The-Warrior-King-1-by-Donna-Fletcher.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3094092090093099/Wed-to-a-Highland-Warrior-The-Warrior-King-4-by-Donna-Fletcher.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1098098097099096/Deviant-Warrior-Dark-Warrior-Alliance-3-by-Brenda-Trim.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5099096092099/The-Immortals-After-Dark-Collection-Dreams-Of-A-Dark-Warrior-Demon-From-The-Dark-A-Hunger-Like-No-Other-Immortals-After-Dark-2-10-11-by-Kresley-Cole.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7096095094093095/The-Warrior-Warriors-1-by-Ty-Patterson.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2094098099093093/Tempted-by-Midnight-Midnight-Breed-12-5-1001-Dark-Nights-9-by-Lara-Adrian.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4095098098090095/Warrior-by-R-G-Grant.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3098097097099096/The-Warrior-s-Pet-Cadi-Warriors-1-by-Stephanie-West.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3098093095090098/The-Witch-and-the-Warrior-Warriors-2-by-Karyn-Monk.pdfIn PDF document text