Malicious PDF — malware analysis report

Static analysis result for SHA-256 2d81ff7e40741aaa…

MALICIOUS

PDF

27.7 KB Created: 2019-04-30 04:10:34 +01:00 Authoring application: mPDF 5.7
MD5: db9f970d3b1ebcf83b9e417afc8aed7e SHA-1: 14a03670177e9928c390318cfbc1fb282443b8a3 SHA-256: 2d81ff7e40741aaafe62b31845e8eff1842b008f4e24bea18fcb42bad5572c14
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF file was flagged as malicious by an ML classifier and contains a large number of embedded links. The heuristic 'PDF_SEO_LINK_FARM' indicates that these links are likely part of a link farm, with 32 external PDF links detected. The primary host for these links is loaminoo.linkpc.net. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090097091092093094/Magazin-AKO-F-r-nicht-dumme-Menschen-Ausgabe-1-by-A-H-R-.pdf
    • http://loaminoo.linkpc.net/1091093093094095099/FILMAUSWEIDER---Das-Splattermovies-Magazin---Ausgabe-1---Human-Centipede-Piranha-3DD-REC-3-Genesis-The-Bunny-Game-The-walking-Dead-Season-3-Deutschlands-neues-Magazin-rund-um-den-blutigen-Film-by-Filmausweider.pdf
    • http://loaminoo.linkpc.net/9095092092094099/M-rdermann-Ich-verteidige-Menschen-nicht-ihre-Taten-by-Uwe-Krechel.pdf
    • http://loaminoo.linkpc.net/8099098097092091/Von-Zeit-und-Strom-Vollst-ndige-deutsche-Ausgabe-Vom-Hunger-Des-Menschen-in-Seiner-Jugend-by-Thomas-Wolfe.pdf
    • http://loaminoo.linkpc.net/8096094092090091/Smarter-schneller-besser-Warum-manche-Menschen-so-viel-erledigt-bekommen---und-andere-nicht-by-Charles-Duhigg.pdf
    • http://loaminoo.linkpc.net/9093092098090096/Posthumanes-Menschsein-Kuenstliche-Intelligenz-Cyberspace-Roboter-Cyborgs-Und-Designer-Menschen---Anthropologie-Des-Kuenstlichen-Menschen-Im-21-Jahrhundert-by-Bernhard-Irrgang.pdf
    • http://loaminoo.linkpc.net/9098092097096093/Furcht-und-Hoffnung-in-Deutschland-Nicht-Fisch-nicht-Fleisch-Der-Spitzel-by-Franz-Xaver-Kroetz.pdf
    • http://loaminoo.linkpc.net/1091092098093090097/Medikamente-Vorsicht-F-lschung-by-GEO-Magazin.pdf
    • http://loaminoo.linkpc.net/1090097091091096094/Bijou-Bonjour-ich-bin-keine-dumme-Sau-by-Stefanie-Gebhard.pdf
    • http://loaminoo.linkpc.net/1090091097090093090/Impress-Magazin-Sommer-2017-Mai-Juli-Tauch-ein-in-romantische-Geschichten-by-Jennifer-Wolf.pdf
    • http://loaminoo.linkpc.net/1090097091091096099/Nur-ein-Leben-Texte-die-dich-auf-dumme-Gedanken-bringen-by-Tim-Chimoy.pdf
    • http://loaminoo.linkpc.net/5099090098095096/Dame-Susan---Deutsche-Ausgabe---Kommentiert-Deutsche-Ausgabe---Kommentiert-by-Jane-Austen.pdf
    • http://loaminoo.linkpc.net/9090090099095097/Northanger-Abtei---Deutsche-Ausgabe---Kommentiert-Deutsche-Ausgabe---Kommentiert-by-Jane-Austen.pdf
    • http://loaminoo.linkpc.net/1090097091092092097/Dumme-Herde-b-se-Hirten-Religion-das-Verbrechen-an-der-Vernunft-by-Peter-Rohregger.pdf
    • http://loaminoo.linkpc.net/1090097091092094093/Witzige-Texte-und-dumme-Spr-che-Band-1---Arbeit-und-Beruf-by-Jack-Young.pdf
    • http://loaminoo.linkpc.net/1090097091092093098/Es-waren-einmal-zwei-wirklich-dumme-G-nse-in-einem-brennenden-Haus-by-Martin-Baltscheit.pdf
    • http://loaminoo.linkpc.net/1090097091093094095/Witzige-Texte-und-dumme-Spr-che-Band-10---Party-Feste-Reisen-und-Urlaub-by-Jack-Young.pdf
    • http://loaminoo.linkpc.net/1090093090098096098/Pr-sentations-Torpedos-entsch-rfen-So-berleben-Sie-pers-nliche-Angriffe-Pannen-dumme-Zwischenfragen-und-andere-St-rfaktoren-by-Cornelia-Topf.pdf
    • http://loaminoo.linkpc.net/1090098096099090099/Impress-Magazin-Winter-2017-2018-November-Januar-Tauch-ein-in-romantische-Geschichten-Impress-Magazine-by-Maya-Prudent.pdf
    • http://loaminoo.linkpc.net/1090098096099090098/Impress-Magazin-Sommer-Herbst-2016-Juli-Oktober-Tauch-ein-in-romantische-Geschichten-Impress-Magazine-4-by-Valentina-Fast.pdf
    • http://loaminoo.linkpc.net/8096094092090091/Smarter-schneller-besser-Warum-manche-Menschen-so-viel-erledigt-bekommen---und-andere-nicht-by-Charle

Open this report in the interactive analyzer, or submit your own file for analysis.