Malicious PDF — malware analysis report

Static analysis result for SHA-256 356cef27a7419ca3…

MALICIOUS

PDF

21.5 KB Created: 2019-05-02 00:59:36 +01:00 Authoring application: mPDF 5.7
MD5: b169620edd5c0ef0f6ec0b69612b42c7 SHA-1: e6db994d768de048494d27cdebaaeec597804e24 SHA-256: 356cef27a7419ca36ed21be096a05ad6fb7f2ffa99a23d48ef4cdb8c86a1ce7e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF was flagged by a machine learning classifier as malicious. Static analysis revealed a large link farm containing 26 external PDF files, many of which appear to be book titles. The embedded URLs are the primary indicators of malicious activity, suggesting a tactic to drive traffic to a large collection of potentially malicious or spam content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4091093098092098/Greene-s-Riches-A-Billionaire-Romance---Vol-4-by-Ana-Vela.pdf
    • http://loaminoo.linkpc.net/4091094093094095/Greene-s-Riches-A-Billionaire-Romance---Vol-2-by-Ana-Vela.pdf
    • http://loaminoo.linkpc.net/1094097092091099/Billionaire-Romance-Billionaire-A-Sizzling-Hot-Billionaire-Romance-Boxed-Set-Collection-by-J-L-Ryan.pdf
    • http://loaminoo.linkpc.net/2098091099092091/The-Billionaire-s-Passion-The-Billionaire-s-Kiss-Book-Four-A-Billionaire-Alpha-Romance-by-Olivia-Thorne.pdf
    • http://loaminoo.linkpc.net/1094097091092092/Billionaire-Romance-Complete-Series-Alpha-Male-Romances-Suspenseful-Alpha-Male-Billionaire-Bad-Boy-Romance-Billionaire-Series-by-J-L-Ryan.pdf
    • http://loaminoo.linkpc.net/4095096098097091/ROMANCE-CONTEMPORARY-ROMANCE-Bounty-and-the-Beast-Billionaire-Bad-Boy-Heroine-Mystery-Romance-Contemporary-Mystery-and-Suspense-Mafia-Romance-Book-2-by-Portia-Paige.pdf
    • http://loaminoo.linkpc.net/4094090093096093/The-Billionaire-s-Stray-Heart-Burke-Billionaire-Romance-Book-2-by-Rachelle-J-Christensen.pdf
    • http://loaminoo.linkpc.net/4094093095090092/The-Billionaire-s-Desire-A-Single-Dad-Romance-The-Billionaire-s-Touch-Book-4-by-L-N-Pearl.pdf
    • http://loaminoo.linkpc.net/4094090096098098/The-Brazen-Billionaire-Clean-Billionaire-Beach-Club-Romance-Book-4-by-Elana-Johnson.pdf
    • http://loaminoo.linkpc.net/4094090097099096/The-Bashful-Billionaire-Clean-Billionaire-Beach-Club-Romance-Book-3-by-Elana-Johnson.pdf
    • http://loaminoo.linkpc.net/4094090096098094/The-Billionaire-s-Bodyguard-Clean-Billionaire-Beach-Club-Romance-Book-5-by-Elana-Johnson.pdf
    • http://loaminoo.linkpc.net/4094090096099093/Mending-Images-with-the-Billionaire-A-Clean-Billionaire-Romance-Artists-amp-Billionaires-Book-4-by-Lorin-Grace.pdf
    • http://loaminoo.linkpc.net/2097093099090098/The-Reclusive-Billionaire-Destination-Billionaire-Romance-1-by-Lucy-McConnell.pdf
    • http://loaminoo.linkpc.net/3091096095095095/Noah-s-Rise-Bad-Boy-Military-Romance-A-Billionaire-Romance-Book-3-by-M-P-Lodi.pdf
    • http://loaminoo.linkpc.net/5099094091098090/Dreaming-of-Manderley-Riches-to-Romance-1-by-Leah-Marie-Brown.pdf
    • http://loaminoo.linkpc.net/5098092093098/Romance-Box-Set-Billionaire-Romance-Feel-The-Music-Books-1-3-Music-in-his-Bones-Soul-and-Heart-by-Amerine-Graham.pdf
    • http://loaminoo.linkpc.net/1096096095098091/Breathless-1-In-Love-With-An-Alpha-Billionaire-by-Shani-Greene-Dowdell.pdf
    • http://loaminoo.linkpc.net/4094090097091098/The-Billionaire-s-Mermaid-A-Vintage-Romance-by-Amberlee-Day.pdf
    • http://loaminoo.linkpc.net/9090090099098097/The-Volkovs-A-Billionaire-Bad-Boy-Mafia-Romance-Box-Set-by-Ava-Bloom.pdf
    • http://loaminoo.linkpc.net/6090096095093/Billionaire-Romance-Music-in-His-soul-by-Amerine-Graham.pdf
    • http://loaminoo.linkpc.net/1094097091092092/Billionaire-Romance-Complete-Series-Alpha-Male-Romances-Suspenseful-Alpha-Male-Billionaire-Bad-Bo

Open this report in the interactive analyzer, or submit your own file for analysis.