Malicious PDF — malware analysis report

Static analysis result for SHA-256 328ff65acc13bdc9…

MALICIOUS

PDF

16.3 KB Created: 2019-05-07 03:55:14 +01:00 Authoring application: mPDF 5.7
MD5: ce6ff7c2c5161cabd2e2abcdfd3fceaf SHA-1: a31f0613be82a85befca3a1c14004fc8f4c180e3 SHA-256: 328ff65acc13bdc99696752b4957b0f4ed5d559ebd7c63533e00415ec16f7d71
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file exhibits characteristics of a link farm, with a large number of embedded URLs pointing to external PDF documents. The ML classifier strongly indicated maliciousness, and the PDF_SEO_LINK_FARM heuristic confirms the presence of numerous links, suggesting a potential attempt to manipulate search results or distribute further malicious content. The URLs themselves are currently flagged as benign, but the overall structure and heuristic firing warrant a high confidence assessment.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3094093094090093/Most-Valuable-Playboy-Most-Valuable-Playboy-1-by-Lauren-Blakely.pdf
    • http://loaminoo.linkpc.net/4096091099091091/Most-Valuable-Playboy-Most-Valuable-Playboy-1-by-Lauren-Blakely.pdf
    • http://loaminoo.linkpc.net/1090097093091096099/Most-Likely-to-Score-Most-Valuable-Playboy-2-by-Lauren-Blakely.pdf
    • http://loaminoo.linkpc.net/7094099094096/Las-dos-caras-del-Playboy-The-two-faces-of-Playboy-by-Mar-a-Men-ndez-Ponte.pdf
    • http://loaminoo.linkpc.net/1094091092091092/Sang-Playboy-Paris---The-Parisian-Playboy-by-Helen-Brooks.pdf
    • http://loaminoo.linkpc.net/7097096098090095/Online-Reputation-Your-Most-Valuable-Asset-in-a-Digital-Age-by-Sarah-Pearce.pdf
    • http://loaminoo.linkpc.net/2094097098098092/Time-is-More-Valuable-Than-Money-Dampak-Transportasi-pada-Hidup-Kita-by-Yoris-Sebastian.pdf
    • http://loaminoo.linkpc.net/1090096094099092091/Blitzscaling-The-Lightning-Fast-Path-to-Building-Massively-Valuable-Companies-by-Reid-Hoffman.pdf
    • http://loaminoo.linkpc.net/2097090097093096/The-Great-Pearl-Heist-London-s-Greatest-Thief-and-Scotland-Yard-s-Hunt-for-the-World-s-Most-Valuable-Necklace-by-Molly-Caldwell-Crosby.pdf
    • http://loaminoo.linkpc.net/4095093090090091/The-Playboy-by-Carly-Phillips.pdf
    • http://loaminoo.linkpc.net/2094092095099097/Falling-for-the-Playboy-by-Kennedy-Fox.pdf
    • http://loaminoo.linkpc.net/1098093096093095/Playboy-by-Caitlin-Daire.pdf
    • http://loaminoo.linkpc.net/3098096097092096/The-Playboy-s-Baby-by-J-M-Stewart.pdf
    • http://loaminoo.linkpc.net/2099096098095097/The-Playboy-s-Baby-by-J-M-Stewart.pdf
    • http://loaminoo.linkpc.net/8096093094099095/Playboy-Redheads-by-James-R-Petersen.pdf
    • http://loaminoo.linkpc.net/2096094096097091/The-Playboy-of-the-Western-World-by-J-M-Synge.pdf
    • http://loaminoo.linkpc.net/1092092092093/Her-Playboy-Challenge-by-Barbara-Hannay.pdf
    • http://loaminoo.linkpc.net/1094095095097091/Playboy-Pilot-by-Penelope-Ward.pdf
    • http://loaminoo.linkpc.net/6096094098093093/Playboy-s-book-of-practical-self-defense-by-Joe-Hyams.pdf
    • http://loaminoo.linkpc.net/4091093090093094/Seducing-the-Playboy-Hot-Nights-2-by-Amanda-Usen.pdf
    • http://loaminoo.linkpc.net/2097090097093096/The-Great-Pearl-Heist-London-s-Greatest-Thief-and-Scotland-Yard-s-Hunt-for-the-World-s-Most-Valuable-Necklace-by-Molly-Cald

Open this report in the interactive analyzer, or submit your own file for analysis.