Malicious PDF — malware analysis report

Static analysis result for SHA-256 36f78e24ea4c2e4a…

MALICIOUS

PDF

15.0 KB Created: 2019-04-30 01:57:23 +01:00 Authoring application: mPDF 5.7
MD5: acd5102c796ec3986dfe77192e8196b5 SHA-1: be47349f972f3fb32370d37f39cf63206508e8b1 SHA-256: 36f78e24ea4c2e4a9ee704ce17ba24cafa89ac6dbc627fbb8ab62039a7f8b4ae
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, hosted on the loaminoo.linkpc.net domain. This behavior is indicative of a link farm or a lure to a large collection of potentially malicious content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2099090092093/A-Knight-s-Persuasion-Knight-s-4-by-Catherine-Kean.pdf
    • http://loaminoo.linkpc.net/7093096097097095/A-Knight-s-Seduction-Knight-s-5-by-Catherine-Kean.pdf
    • http://loaminoo.linkpc.net/7093096097097090/A-Knight-s-Reward-Knight-s-2-by-Catherine-Kean.pdf
    • http://loaminoo.linkpc.net/2091098092098096/The-Forever-Knight-The-Bronze-Knight-4-by-John-Marco.pdf
    • http://loaminoo.linkpc.net/1099099093094099/Being-Sawyer-Knight-Souls-of-the-Knight-1-by-Nicola-Haken.pdf
    • http://loaminoo.linkpc.net/7095099092098/Killing-Sam-Knight-The-Knight-Chronicles-2-by-John-Cassian.pdf
    • http://loaminoo.linkpc.net/2094091097092093/Evie-s-Knight-The-Knight-Series-1-by-Kimberly-Krey.pdf
    • http://loaminoo.linkpc.net/8096091098097/Wicked-Knight-Knight-Brothers-1-by-Tierney-O-39-Malley.pdf
    • http://loaminoo.linkpc.net/3098090097094098/Brooklyn-Knight-Piers-Knight-1-by-C-J-Henderson.pdf
    • http://loaminoo.linkpc.net/1092096092095/A-Knight-to-Remember-Knight-2-by-Christina-Dodd.pdf
    • http://loaminoo.linkpc.net/1091093099092099/The-Last-Knight-Knight-and-Rogue-1-by-Hilari-Bell.pdf
    • http://loaminoo.linkpc.net/3096093091093096/Knight-s-End-Knight-s-Trilogy-1-by-Jami-Montgomery.pdf
    • http://loaminoo.linkpc.net/2095097094091097/Darkest-Knight-City-Knight-5-by-T-A-Webb.pdf
    • http://loaminoo.linkpc.net/4093094099095096/Once-a-Knight-Knight-1-by-Christina-Dodd.pdf
    • http://loaminoo.linkpc.net/2092099099093096/Her-Rogue-Knight-by-Natasha-Knight.pdf
    • http://loaminoo.linkpc.net/4097097093098099/The-Bathrobe-Knight-Volume-3-The-Bathrobe-Knight-3-by-Charles-Dean.pdf
    • http://loaminoo.linkpc.net/1096099099098096/The-Green-Knight-s-Squire-The-Green-Knight-s-Squire-1-3-Moth-amp-Cobweb-1-3-by-John-C-Wright.pdf
    • http://loaminoo.linkpc.net/7093096098090098/Bound-By-His-Kiss-Novella-by-Catherine-Kean.pdf
    • http://loaminoo.linkpc.net/7093096097099094/Magnificent-Medieval-Champions-by-Catherine-Kean.pdf
    • http://loaminoo.linkpc.net/2091098093098092/The-Dragon-Knight-Dragon-Knight-2-by-Gordon-R-Dickson.pdf
    • http://loaminoo.linkpc.net/3096093091093096/Knight-s-End-Knight-s-Tril

Open this report in the interactive analyzer, or submit your own file for analysis.