Malicious PDF — malware analysis report

Static analysis result for SHA-256 27b258066081d444…

MALICIOUS

PDF

19.0 KB Created: 2019-05-01 18:51:06 +01:00 Authoring application: mPDF 5.7
MD5: da2b538237d6b5146874fe9663c1a14f SHA-1: 6101d174dff2e263aa5f0a29cef869306f8bdca8 SHA-256: 27b258066081d4447160c9b86d5ddee9b8b713c2ba8f4b7cc5323056f2957b7f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Phishing:Spearphishing Attachment T1204.002 Malicious Link

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of embedded URLs pointing to PDF files. The heuristic PDF_SEO_LINK_FARM indicates a link farm, with the dominant host being xiixmcuin.linkpc.net. While the URLs themselves are labeled as confirmed benign, the sheer volume and the nature of the heuristic suggest a malicious intent, likely SEO poisoning or a distribution point for further malware. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://xiixmcuin.linkpc.net/2208204201208205/Philosophy-of-Science-A-Contemporary-Introduction-by-Alex-Rosenberg.pdf
    • http://xiixmcuin.linkpc.net/2203202203206208/Mindware-An-Introduction-to-the-Philosophy-of-Cognitive-Science-by-Andy-Clark.pdf
    • http://xiixmcuin.linkpc.net/9202200202207202/Philosophy-of-Science-The-Link-Between-Science-and-Philosophy-by-Philipp-Frank.pdf
    • http://xiixmcuin.linkpc.net/6205203204201209/Introduction-to-the-Philosophy-of-History-with-Selections-from-The-Philosophy-of-Right-by-Georg-Wilhelm-Friedrich-Hegel.pdf
    • http://xiixmcuin.linkpc.net/1201200205207208/The-Invisible-Ladder-An-Anthology-of-Contemporary-American-Poems-for-Young-Readers-by-Liz-Rosenberg.pdf
    • http://xiixmcuin.linkpc.net/1206205200/The-Girl-from-Krakow-by-Alex-Rosenberg.pdf
    • http://xiixmcuin.linkpc.net/6202207203203201/Tainted-How-Philosophy-of-Science-Can-Expose-Bad-Science-by-Kristin-Shrader-Frechette.pdf
    • http://xiixmcuin.linkpc.net/1201207200200204201/Philosophy-of-Science-An-Overview-for-Cognitive-Science-by-William-Bechtel.pdf
    • http://xiixmcuin.linkpc.net/6202200201201208/Happiness-Classic-and-Contemporary-Readings-in-Philosophy-by-Steven-M-Cahn.pdf
    • http://xiixmcuin.linkpc.net/6202200201201202/Classic-and-Contemporary-Readings-in-the-Philosophy-of-Education-by-Steven-M-Cahn.pdf
    • http://xiixmcuin.linkpc.net/4202204203207204/New-Proofs-for-the-Existence-of-God-Contributions-of-Contemporary-Physics-and-Philosophy-by-Robert-J-Spitzer.pdf
    • http://xiixmcuin.linkpc.net/3206208203209209/Relativism-and-Reality-A-Contemporary-Introduction-by-Robert-Kirk.pdf
    • http://xiixmcuin.linkpc.net/1200203208203201204/Blanchot-Extreme-Contemporary-Warwick-Studies-in-European-Philosophy-Series-by-Leslie-Hill.pdf
    • http://xiixmcuin.linkpc.net/2206200204201206/Philosophy-A-Very-Short-Introduction-by-Edward-Craig.pdf
    • http://xiixmcuin.linkpc.net/3209202202209201/Indian-Philosophy-A-Very-Short-Introduction-by-Sue-Hamilton.pdf
    • http://xiixmcuin.linkpc.net/2204203200208204/Think-A-Compelling-Introduction-to-Philosophy-by-Simon-Blackburn.pdf
    • http://xiixmcuin.linkpc.net/3206205205205200/Think-A-Compelling-Introduction-to-Philosophy-by-Simon-Blackburn.pdf
    • http://xiixmcuin.linkpc.net/8209205202206205/Sisters-And-Strangers-An-Introduction-To-Contemporary-Feminist-Fiction-by-Patricia-Duncker.pdf
    • http://xiixmcuin.linkpc.net/5206208202205204/Philosophy-of-Mind-A-Comprehensive-Introduction-by-William-Jaworski.pdf
    • http://xiixmcuin.linkpc.net/1201205209200205207/Karl-Jaspers-An-Introduction-to-His-Philosophy-by-Charles-F-Wallraff.pdf
    • http://xiixmcuin.linkpc.net/120120

Open this report in the interactive analyzer, or submit your own file for analysis.