Malicious PDF — malware analysis report

Static analysis result for SHA-256 34a96d37a6403693…

MALICIOUS

PDF

13.3 KB Created: 2019-04-29 23:24:49 +01:00 Authoring application: mPDF 5.7
MD5: a65fbc078866af0b6b32263138b9727b SHA-1: fdb7796bdf603e9f19c9b39dd29cf4244ead7332 SHA-256: 34a96d37a640369396c6dd539f9dafabedd55c2190aca77fc24b9379ed2d71ae
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of embedded links. The heuristic 'PDF_SEO_LINK_FARM' indicates that these links are likely part of a scheme to manipulate search engine results or distribute further malicious content. While no scripts were extracted, the sheer volume of links suggests a content-driven attack, possibly a phishing or malware distribution attempt.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9006

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1097099095091092/Looking-at-Lincoln-by-Maira-Kalman.pdf
    • http://loaminoo.linkpc.net/1098097091096091/And-the-Pursuit-of-Happiness-by-Maira-Kalman.pdf
    • http://loaminoo.linkpc.net/2093098094093096/Sayonara-Mrs-Kackleman-by-Maira-Kalman.pdf
    • http://loaminoo.linkpc.net/1091096095099098099/Hurry-Up-and-Wait-by-Maira-Kalman.pdf
    • http://loaminoo.linkpc.net/1091096096090091090/Swami-on-Rye-Max-in-India-by-Maira-Kalman.pdf
    • http://loaminoo.linkpc.net/2093096099095094/Hey-Willy-See-the-Pyramids-by-Maira-Kalman.pdf
    • http://loaminoo.linkpc.net/1091096096090091097/Chicken-Soup-Boots-by-Maira-Kalman.pdf
    • http://loaminoo.linkpc.net/3091092096094097/Next-Stop-Grand-Centr-by-Maira-Kalman.pdf
    • http://loaminoo.linkpc.net/2095093099094/Beloved-Stranger-Beloved-Trilogy-2-by-Patricia-Potter.pdf
    • http://loaminoo.linkpc.net/3097090098095090/The-Well-Beloved-with-The-Pursuit-of-the-Well-Beloved-by-Thomas-Hardy.pdf
    • http://loaminoo.linkpc.net/3094092099090/Contours-Of-The-Heart-South-Asians-Map-North-America-by-Sunaina-Maira.pdf
    • http://loaminoo.linkpc.net/5090096092095092/The-Cosmopolitans-by-Nadia-Kalman.pdf
    • http://loaminoo.linkpc.net/6099095096095095/What-Is-a-Carnivore-by-Bobbie-Kalman.pdf
    • http://loaminoo.linkpc.net/7094094096092092/Melchior-Kat-nghy-by-K-lm-n-Miksz-th.pdf
    • http://loaminoo.linkpc.net/1091092094093093096/Tibor-Kalman-Design-and-Undesign-by-Liz-Farrelly.pdf
    • http://loaminoo.linkpc.net/8099095092092094/Chairman-Rolf-Fehlbaum-by-Tibor-Kalman.pdf
    • http://loaminoo.linkpc.net/1091096095099095095/Kalman-Filter-for-Beginners-With-MATLAB-Examples-by-Phil-Kim.pdf
    • http://loaminoo.linkpc.net/6090092097094093/Into-the-Light-The-Healing-Art-of-Kalman-Aron-by-Susan-Beilby-Magee.pdf
    • http://loaminoo.linkpc.net/1091096095099099097/Fundamentals-of-Kalman-Filtering-A-Practical-Approach-by-Paul-Zarchan.pdf
    • http://loaminoo.linkpc.net/2091093098090098/The-Beloved-by-P-A-Minyard.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.