Malicious PDF — malware analysis report

Static analysis result for SHA-256 3ebece5d7ebadc54…

MALICIOUS

PDF

17.1 KB Created: 2019-05-03 16:49:47 +01:00 Authoring application: mPDF 5.7 First seen: 2021-03-01
MD5: 15c3a88de6ee7c65c4215a0a51e02ba1 SHA-1: 6432d0b936efc6170218f94f25912b652add3eb0 SHA-256: 3ebece5d7ebadc542ce751d9178673b0b5c74289609ec08b1ea68c301d9f5052
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4094096094098095/Uncle-Petros-and-Goldbach-s-Conjecture-by-Apostolos-K-Doxiadis.pdf In PDF document text
    • http://loaminoo.linkpc.net/5095094091090/Uncle-Petros-and-Goldbach-s-Conjecture-A-Novel-of-Mathematical-Obsession-by-Apostolos-K-Doxiadis.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090098094092/Logicomix-An-Epic-Search-for-Truth-by-Apostolos-K-Doxiadis.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6092093097098093/The-Real-Fatou-Conjecture-Am-144-Volume-144-by-Jacek-Graczyk.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8091093093091091/Spithame-Zoes-Diegemata-by-Petros-Sophas.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2099092093090096/The-Poincar-Conjecture-In-Search-of-the-Shape-of-the-Universe-by-Donal-O-39-Shea.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4097099091096098/Moan-For-Uncle-Moan-for-Uncle-1-by-Terry-Towers.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3097097093093091/Oliver-and-Angus-Shifting-Perspectives-1-by-Nerine-Petros.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3097098091091097/Jacey-Fynn-amp-Aden-Shifting-Perspectives-2-by-Nerine-Petros.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7094094093093090/Ricci-Flow-and-the-Poincare-Conjecture-Clay-Mathematics-Monographs-by-John-W-Morgan.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3092094094092093/The-Life-and-Struggles-of-Our-Mother-Walatta-Petros-A-Seventeenth-Century-African-Biography-of-an-Ethiopian-Woman-by-Galawdewos.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2095092094099095/Uncle-John-s-Bathroom-Reader-Uncle-John-s-Bathroom-Reader-1-by-Bathroom-Readers-39-Institute.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6094095092096099/My-Uncle-Silas-by-H-E-Bates.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2093099094092/Uncle-Sam-by-Steve-Darnall.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4098094091096095/The-Last-Uncle-by-Linda-Pastan.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1091099092092090094/Practical-LSD-Manufacture-by-Uncle-Fester.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5092090095090092/Uncle-Lau-s-Teochew-Recipes-by-Tan-Lee-Leng.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7093098095099/My-Uncle-Napoleon-by-Iraj-Pezeshkzad.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3096096095090098/Uncle-Fred-An-Omnibus-by-P-G-Wodehouse.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1099092098093/Losing-Uncle-Tim-by-Marykate-Jordan.pdfIn PDF document text