Malicious PDF — malware analysis report

Static analysis result for SHA-256 3320377a73d5b541…

MALICIOUS

PDF

44.6 KB Created: 2019-05-07 08:58:51 +01:00 Authoring application: mPDF 5.7
MD5: b1fc68cdc4b015e6f20daec8b137bce1 SHA-1: fda1f4b8e1352acb23f7f37db15f82ee15a6fb1c SHA-256: 3320377a73d5b541d34c156854bd17893ae639d7c571d3e9e8344a3a300ec2c7
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged the document as malicious. The embedded URLs, while appearing benign in isolation, are used in a mass linking scheme, likely to drive traffic or for SEO manipulation, which is a common tactic for distributing malicious content or phishing pages.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9556

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090092098094095098/Raymond-Khoury-Books-2017-Checklist-Reading-Order-of-Templar-Series-and-List-of-All-Raymond-Khoury-Books-by-Series-List.pdf
    • http://loaminoo.linkpc.net/1091097094090094093/Karen-Rose-Books-2017-Checklist-Reading-Order-of-Baltimore-Series-Chicago-Series-Cincinnati-Series-Daniel-Vartanian-Series-Romantic-Suspense-Series-and-List-of-All-Karen-Rose-Books-by-Series-List.pdf
    • http://loaminoo.linkpc.net/8092098092098093/Guy-Gavriel-Kay-Books-2017-Checklist-Reading-Order-of-Fionavar-Tapestry-Series-Sarantine-Mosaic-Series-Under-Heaven-Series-and-List-of-All-Guy-Gavriel-Kay-Books-by-Sorted-List.pdf
    • http://loaminoo.linkpc.net/7090093094099098/Deanna-Raybourn-Books-2017-Checklist-Reading-Order-of-A-Spear-of-Summer-Grass-Series-City-of-Jasmine-Series-Lady-Julia-Grey-Series-Veronica-Speedwell-Series-and-List-of-All-Deanna-Raybourn-Books-by-Platinum-List.pdf
    • http://loaminoo.linkpc.net/9099093092094091/Ann-Leckie-Books-2017-Checklist-Reading-Order-of-Imperial-Radch-Series-and-List-of-All-Ann-Leckie-Books-by-List-Fun.pdf
    • http://loaminoo.linkpc.net/5098095090096095/Fred-Vargas-Books-2017-Checklist-Reading-Order-of-Commissaire-Adamsberg-Series-Three-Evangelists-Series-and-List-of-All-Fred-Vargas-Books-by-Platinum-List.pdf
    • http://loaminoo.linkpc.net/8096094093092091/Coreene-Callahan-Books-2017-Checklist-Reading-Order-of-Circle-of-Seven-Series-Dragonfury-Series-and-List-of-All-Coreene-Callahan-Books-by-Diamond-List.pdf
    • http://loaminoo.linkpc.net/1091096093096096096/Liza-Marklund-Books-2017-Checklist-Reading-Order-of-Annika-Bengtzon-Series-and-List-of-All-Liza-Marklund-Books-by-Series-List.pdf
    • http://loaminoo.linkpc.net/5094094098094097/Brandon-Mull-Books-Checklist-and-Series-in-Order-2017-Beyonders-Series-in-Order-Candy-Shop-War-Series-in-Order-Dragonwatch-Series-in-Order-Fablehaven-Series-Five-Kingdoms-Series-and-More-by-List-To-Read.pdf
    • http://loaminoo.linkpc.net/5093099096090095/Stieg-Larsson-Books-2017-Checklist-Reading-Order-of-Millennium-Series-and-List-of-All-Stieg-Larsson-Books-by-Series-List.pdf
    • http://loaminoo.linkpc.net/6091095090096095/Carlos-Ruiz-Zafon-Books-2017-Checklist-Reading-Order-of-Cemetery-Of-Forgotten-Series-Niebla-Series-and-List-of-All-Carlos-Ruiz-Zafon-Books-by-Platinum-List.pdf
    • http://loaminoo.linkpc.net/9098093095095090/Dmitry-Glukhovsky-Books-2017-Checklist-Reading-Order-of-Universe-Metro-Series-and-List-of-All-Dmitry-Glukhovsky-Books-by-Platinum-List.pdf
    • http://loaminoo.linkpc.net/8090099096090099/Reed-Farrel-Coleman-Books-2017-Checklist-Reading-Order-of-Coleman-s-Jesse-Stone-Series-Gus-Murphy-Series-Joe-Serpe-Series-Moe-Prager-Series-and-List-of-All-Reed-Farrel-Coleman-Books-by-Series-Order.pdf
    • http://loaminoo.linkpc.net/9092099096090094/Haruki-Murakami-Books-2017-Checklist-Reading-Order-of-1Q84-Series-Rat-Series-and-List-of-All-Haruki-Murakami-Books-by-Series-Order.pdf
    • http://loaminoo.linkpc.net/7091096092099096/Maya-Banks-Series-Reading-Order-amp-Checklist-Series-List-in-Order---KGI-Series-Enforcers-Series-Slow-Burn-Series-amp-All-Other-Books-Listabook-Series-Order-Book-58-by-Listabook.pdf
    • http://loaminoo.linkpc.net/1090091098096097094/Ben-Aaronovitch-Books-Checklist-Reading-Order-of-Doctor-Who-Series-PC-Peter-Grant-Series-and-List-of-All-Ben-Aaronovitch-Books-by-Kevin-Hanson.pdf
    • http://loaminoo.linkpc.net/8096093094091098/Libba-Bray-Books-Checklist-Reading-Order-of-Gemma-Doyle-Series-The-Diviners-Series-and-List-of-All-Libba-Bray-Books-by-Kevin-Hanson.pdf
    • http://loaminoo.linkpc.net/7091090092092090/JAMES-DASHNER-SERIES-READING-ORDER-THE-MAZE-RUNNER-BOOKS-JIMMY-FINCHER-BOOKS-13TH-REALITY-BOOKS-INFINITY-RING-BOOKS-MORTALITY-DOCTRINE-BOOKS-BY-JAMES-DASHNER-by-List-Series.pdf
    • http://loaminoo.linkpc.net/5094094098094098/Brandon-Mull-Series-Reading-Order-amp-Checklist-Series-List-in-Order---Five-Kingdom-Series-Fablehaven-Series-Beyonders-Trilogy-Candy-Shop-War-Series-Listabook-Series-Order-Book-24-by-Listabook.pdf
    • http://loaminoo.linkpc.net/1093093095097094/Orson-Scott-Card-Series-Reading-Order-amp-Checklist-Series-List-in-Order---Ender-Series-Formic-War-Series-Shadow-Series-Ender-Series-amp-Tales-of-Alvin-Maker-Series-Listabook-Series-Order-Book-15-by-Listabook.pdf
    • http://loaminoo.linkpc.net/8092098092098093/Guy-Gavriel-Kay-Books-2017-Checklist-Reading-Order-of-Fionavar-Tapestry-Series-Sarantine-Mosaic-Series-U

Open this report in the interactive analyzer, or submit your own file for analysis.