Malicious PDF — malware analysis report

Static analysis result for SHA-256 405be65313e61088…

MALICIOUS

PDF

17.8 KB Created: 2019-05-02 05:09:28 +01:00 Authoring application: mPDF 5.7
MD5: 389cdaba2793084908b609b860928381 SHA-1: 51cbea21ad83eed950e53e9175f8b9522203802b SHA-256: 405be65313e61088c75656b31b4f12fce818f55b5af91f61935071f5185be16f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file was flagged by a machine learning classifier as malicious. It contains a large number of embedded links to external PDF files, a technique often used for SEO poisoning or to distribute further malicious content. The primary heuristic identified a link farm hosted on 'loaminoo.linkpc.net'. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4091094097093097/Murder-amp-Chips-Jiggy-McCue-13-by-Michael-Lawrence.pdf
    • http://loaminoo.linkpc.net/6090095099097090/Neville-the-Devil-Jiggy-McCue-7-by-Michael-Lawrence.pdf
    • http://loaminoo.linkpc.net/2097099090093091/Perfect-Murder-Perfect-Town-The-Uncensored-Story-of-the-JonBenet-Murder-and-the-Grand-Jury-s-Search-for-the-Truth-by-Lawrence-Schiller.pdf
    • http://loaminoo.linkpc.net/4097091094090092/No-Cure-For-Murder-by-Lawrence-W-Gold.pdf
    • http://loaminoo.linkpc.net/8094091098093090/Sons-and-Lovers-1913-Novel-by-D-H-Lawrence-100-Best-Novels-of-the-20th-Century-Include-Women-in-Love-1920-Novel-By-D-H-Lawrence-by-D-H-Lawrence.pdf
    • http://loaminoo.linkpc.net/4099092092098091/A-Canterbury-Crime-Belinda-Lawrence-Murder-Mystery-4-by-Brian-Kavanagh.pdf
    • http://loaminoo.linkpc.net/1095096091096095/Tears-of-Joy-by-Michael-Lawrence.pdf
    • http://loaminoo.linkpc.net/4091091091099091/If-I-were-a-chick-by-Michael-Lawrence.pdf
    • http://loaminoo.linkpc.net/6094092095094099/West-Des-Moines-and-Valley-Junction-by-Craig-S-McCue.pdf
    • http://loaminoo.linkpc.net/4097091097092098/A-Crack-in-the-Line-The-Aldous-Lexicon-1-by-Michael-Lawrence.pdf
    • http://loaminoo.linkpc.net/4090092095095091/Big-Science-Ernest-Lawrence-and-the-Invention-that-Launched-the-Military-Industrial-Complex-by-Michael-A-Hiltzik.pdf
    • http://loaminoo.linkpc.net/5098092096099099/Little-Miss-Murder-by-Michael-Avallone.pdf
    • http://loaminoo.linkpc.net/4093095099098097/Murder-and-Other-Distractions-by-Michael-Estrin.pdf
    • http://loaminoo.linkpc.net/8095092090096094/Skeletons-Of-A-Murder-by-Michael-Banni.pdf
    • http://loaminoo.linkpc.net/4090090097095092/Tegami-Bachi-Vol-2-Letter-Bee-The-Letter-to-Jiggy-Pepper-by-Hiroyuki-Asada.pdf
    • http://loaminoo.linkpc.net/1090090098092094/Mick-Charger-Murder-by-Cop-by-Michael-Atencio.pdf
    • http://loaminoo.linkpc.net/1098092093095094/Murder-in-Jerusalem-Michael-Ohayon-6-by-Batya-Gur.pdf
    • http://loaminoo.linkpc.net/3096092099091095/The-Fig-Tree-Murder-Mamur-Zapt-10-by-Michael-Pearce.pdf
    • http://loaminoo.linkpc.net/5097095091093091/Rhinoceroses-amp-Potato-Chips-by-M-E-Wonder.pdf
    • http://loaminoo.linkpc.net/4093092094095093/The-Golden-Warrior-The-Life-and-Legend-of-Lawrence-of-Arabia-by-Lawrence-James.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.