Malicious PDF — malware analysis report

Static analysis result for SHA-256 2e0e6f35e4041c57…

MALICIOUS

PDF

17.4 KB Created: 2019-04-30 03:43:53 +01:00 Authoring application: mPDF 5.7
MD5: b1a719625d41f39a76e61c6f9441c061 SHA-1: 5058ae6900f40280c5cb4efc4f298a7334c3d8bb SHA-256: 2e0e6f35e4041c575c8712e445758da025dfdc835e16502891cd520ae0638a0a
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF document was flagged by a machine learning classifier as malicious. Static analysis revealed a large number of embedded external links pointing to PDF files hosted on the loaminoo.linkpc.net domain. This suggests a link farm or redirection tactic to distribute further content, likely malicious, to unsuspecting users. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4096092092095097/The-Lady-of-the-Lakes-The-True-Love-Story-of-Sir-Walter-Scott-Historical-Proper-Romance-2-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/2097093098097096/A-Lady-s-Favor-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/1091092090097090097/All-That-Makes-Life-Bright-The-Life-and-Love-of-Harriet-Beecher-Stowe-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/8092092090096099/Lady-of-the-Lake-Walter-Scott-1910-by-Walter-Scott.pdf
    • http://loaminoo.linkpc.net/1099095099095098/Sheep-s-Clothing-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/2094094096092094/A-Heart-Revealed-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/4096099095094091/The-Vicar-s-Daughter-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/4099091091092098/Fortune-Cookie-A-Culinary-Mystery-11-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/9093091091093098/Banana-Split-A-Culinary-Mystery-7-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/2091090091097093/Lemon-Tart-A-Culinary-Mystery-1-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/2091090094090098/Daisy-The-Newport-Ladies-Book-Club-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/3091095095094096/Devil-s-Food-Cake-A-Culinary-Mystery-3-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/5092097093090096/Tres-Leches-Cupcakes-A-Culinary-Mystery-8-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/4098098090090094/Autumn-Masquerade-Timeless-Regency-Collection-Book-1-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/4098098090091090/A-Country-Christmas-Timeless-Regency-Collection-Book-5-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/4092090095096093/From-noon-till-three-The-possibly-true-and-certainly-tragic-story-of-an-outlaw-and-a-lady-whose-love-knew-no-bounds-by-Frank-D-Gilroy.pdf
    • http://loaminoo.linkpc.net/5096098098090099/Ivanhoe---A-Romance-by-Walter-Scott.pdf
    • http://loaminoo.linkpc.net/1090093097090093/The-Lady-of-the-Lake-by-Walter-Scott.pdf
    • http://loaminoo.linkpc.net/9093091096090090/Ivanhoe-Annotated-A-Romance-by-Walter-Scott.pdf
    • http://loaminoo.linkpc.net/4095096099095099/Crime-Boss-Baby-A-Billionaire-Mafia-Love-Story-Bad-Boys-and-Babies-Book-3-by-Krista-Lakes.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.