Malicious PDF — malware analysis report

Static analysis result for SHA-256 2902923854916133…

MALICIOUS

PDF

18.3 KB Created: 2019-04-30 04:36:05 +01:00 Authoring application: mPDF 5.7
MD5: ef07d3260cf1319a4f215f8f69c05e59 SHA-1: 769940c466a0bf4966ce49e471c16abe1884201e SHA-256: 29029238549161335a7d57483225661ce4ca94b3addb8aa2987ad40e643ecc3f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious File

The PDF contains a large number of embedded links to external PDF files, forming a link farm. This is indicative of a SEO poisoning or traffic generation scheme, potentially leading to further malicious content. The ML classifier also flagged this document as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6094096092098095/Zingerman-s-Guide-to-Better-Bacon-Stories-of-Pork-Bellies-Hush-Puppies-Rock-n-Roll-Music-and-Bacon-Fat-Mayonnaise-by-Ari-Weinzweig.pdf
    • http://loaminoo.linkpc.net/4094091091098099/Hollywood-Rocks-The-Ultimate-Guide-to-the-1980-s-Hollywood-California-Rock-N-Roll-Music-Scene-by-Michael-J-Rocchio.pdf
    • http://loaminoo.linkpc.net/4094091098096097/The-First-Rock-amp-Roll-Confidential-Report-Inside-the-Real-World-of-Rock-and-Roll-by-Dave-Marsh.pdf
    • http://loaminoo.linkpc.net/2093091099090097/Rock-n-Roll-Is-Dead-Dark-Tales-Inspired-by-Music-by-Marc-Ciccarone.pdf
    • http://loaminoo.linkpc.net/5099094098097097/Rock-and-Roll-Always-Forgets-A-Quarter-Century-of-Music-Criticism-by-Chuck-Eddy.pdf
    • http://loaminoo.linkpc.net/9090092093093091/7th-Heaven-and-the-Rock-n-roll-Kids-Rock-n-roll-to-the-Rescue-Art-and-Introduction-by-Roy-Adorjan.pdf
    • http://loaminoo.linkpc.net/1097095097092/The-Inward-Eye-by-Peggy-Bacon.pdf
    • http://loaminoo.linkpc.net/3099095098093096/The-New-Organon-by-Francis-Bacon.pdf
    • http://loaminoo.linkpc.net/4091097099091092/The-New-Atlantis-by-Francis-Bacon.pdf
    • http://loaminoo.linkpc.net/4090095096098097/For-Better-for-Worse-by-Margaret-Bacon.pdf
    • http://loaminoo.linkpc.net/3098095095094094/Finn-by-Katharine-Jay-Bacon.pdf
    • http://loaminoo.linkpc.net/3093091090098099/The-Mutt-The-Order-1-by-Kasia-Bacon.pdf
    • http://loaminoo.linkpc.net/9093091092092091/Split-Estate-by-Charlotte-Bacon.pdf
    • http://loaminoo.linkpc.net/4096090097096093/Lost-Geography-by-Charlotte-Bacon.pdf
    • http://loaminoo.linkpc.net/1090095092099098/Wisdom-of-the-Ancients-by-Francis-Bacon.pdf
    • http://loaminoo.linkpc.net/3092093090092093/Those-Tourists-Are-Money-The-Rock-amp-Roll-Guide-To-Camden-by-Ann-Scanlon.pdf
    • http://loaminoo.linkpc.net/2096094098093096/Sophia-Scrooby-Preserved-by-Martha-Bacon.pdf
    • http://loaminoo.linkpc.net/3093090098097092/The-Poison-Within-Inspector-Skaer-1-by-Kasia-Bacon.pdf
    • http://loaminoo.linkpc.net/1098099097098/The-Prisoner-of-the-Riviera-Francis-Bacon-2-by-Janice-Law.pdf
    • http://loaminoo.linkpc.net/2097092092096096/Moon-Over-Tangier-Francis-Bacon-3-by-Janice-Law.pdf
    • http://loaminoo.linkpc.net/5099094098097097/Rock-and-Roll-Always-Forgets-A-Quarter-Cent

Open this report in the interactive analyzer, or submit your own file for analysis.