Malicious PDF — malware analysis report

Static analysis result for SHA-256 30a737927e050951…

MALICIOUS

PDF

26.0 KB Created: 2019-04-30 03:59:51 +01:00 Authoring application: mPDF 5.7
MD5: 29dc71d9bff12e292c8d247bbbcc7954 SHA-1: 1121fa8ea1e0cf7efafe3f6d8f594a750e5de7c5 SHA-256: 30a737927e050951d17a55355a0f3f1133d8d49133ba65b09d41efda61db79b3
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF file contains a large number of embedded links pointing to external PDF documents hosted on a dynamic DNS domain. This pattern is indicative of SEO poisoning or a traffic redirection scheme. The ML classifier strongly supports the malicious verdict. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9912

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6096091091094/Defining-Standard-Philippine-English-Its-Status-And-Grammatical-Features-by-Maria-Lourdes-S-Bautista.pdf
    • http://loaminoo.linkpc.net/1091090091095093093/Comparative-French-English-Studies-Grammatical-and-Idiomatic-by-G-George-Eugene-Fasnacht.pdf
    • http://loaminoo.linkpc.net/6096094097099/A-Native-Clearing-Filipino-Poetry-and-Verse-from-English-Since-the-50s-to-the-Present-Edith-L-Tiempo-to-Cirilo-F-Bautista-by-G-mino-H-Abad.pdf
    • http://loaminoo.linkpc.net/7091096099096099/Our-Lady-of-Lourdes---Lourdes-Its-Grotto-Apparitions-and-Cures-by-John-Walsh.pdf
    • http://loaminoo.linkpc.net/4092090095093/The-Holy-Bible-English-Standard-Version-by-Anonymous.pdf
    • http://loaminoo.linkpc.net/3098090094097/The-Holy-Bible-English-Standard-Version-by-Anonymous.pdf
    • http://loaminoo.linkpc.net/8099092093098098/Funk-and-Wagnalls-Standard-Dictionary-of-Folklore-Mythology-and-Legend-by-Maria-Leach.pdf
    • http://loaminoo.linkpc.net/3098097094092/Morning-and-Evening-Based-on-the-English-Standard-Version-by-Charles-Haddon-Spurgeon.pdf
    • http://loaminoo.linkpc.net/1091095090099096096/Women-And-War-The-Changing-Status-Of-American-Women-From-The-1930s-To-The-1950s-by-Maria-Diedrich.pdf
    • http://loaminoo.linkpc.net/1091090091095095091/Comparative-French-English-Studies-Grammatical-and-Idiomatic-Being-an-Entirely-Re-Written-Edition-of-the-French-Exercises-for-Middle-and-Upper-Forms-Adapted-to-the-Studens-Comparative-French-Grammar-by-G-Eugene-Fasnacht.pdf
    • http://loaminoo.linkpc.net/7090093094096099/The-Book-of-the-Standard-Nine---A-Complete-Guide-for-Owner-Drivers-and-Prospective-Purchasers-of-All-Standard-Nines-from-1932-1938-by-John-Speedwell.pdf
    • http://loaminoo.linkpc.net/5090095097099/The-Standard-Standard-1-by-John-Reinhard-Dizon.pdf
    • http://loaminoo.linkpc.net/7091098099099097/Standard-of-Excellence-Book-1-Comprehensive-Band-Method-Book-1-Trombone-Bass-Clef-Standard-of-Excellence-Series-by-Bruce-Pearson.pdf
    • http://loaminoo.linkpc.net/2097093096096096/Don-t-Tell-My-Mother-by-Brigitte-Bautista.pdf
    • http://loaminoo.linkpc.net/6096097094091/Telex-Moon-by-Cirilo-F-Bautista.pdf
    • http://loaminoo.linkpc.net/1097094098096099/Standard-Romance-Story-Fireman-Edition-Standard-Romance-Story-1-by-M-S-Willis.pdf
    • http://loaminoo.linkpc.net/6091091096094093/Floricanto-En-Aztlan-by-Alurista-Hayes-Bautista.pdf
    • http://loaminoo.linkpc.net/1090094091095090092/Maria-Himmelfahrt-Kirche-Maria-Aufnahme-in-Den-Himmel-Dormitio-Kirche-Dom-Zu-Gurk-Maria-Entschlafens-Kathedrale-Brixner-Dom-by-Quelle-Wikipedia.pdf
    • http://loaminoo.linkpc.net/1090093096092093090/Grammatical-Literature-by-Hartmut-Scharfe.pdf
    • http://loaminoo.linkpc.net/1091093099097096099/The-Mental-Status-Examination-in-Neurology-the-Mental-Status-Examination-in-Neurology-the-Mental-Status-Examination-in-Neurology-by-Richard-L-Strub.pdf
    • http://loaminoo.linkpc.net/8099092093098098/Funk-and-Wagnalls-Standard-Dictionary-of-Folklore-Myth

Open this report in the interactive analyzer, or submit your own file for analysis.