Malicious PDF — malware analysis report

Static analysis result for SHA-256 444858303718f702…

MALICIOUS

PDF

14.1 KB Created: 2019-05-01 19:30:04 +01:00 Authoring application: mPDF 5.7
MD5: 14bef36089aea70e42074c5624e1c868 SHA-1: 4fa0a4b817111dff8e8f81a7bcb7c89d35f3c80c SHA-256: 444858303718f702c2eaa12ddad43791c5a5f3a64c6a0e7fa57a077cd14d7aba
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic, which suggests a link farm or distribution mechanism. The ML_NYX_PDF_MALICIOUS heuristic also flagged the document with high confidence. While the URLs themselves are marked as benign, the sheer volume and the nature of the heuristic indicate a malicious intent, likely to direct users to malicious content or for SEO poisoning.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3095092095099097/The-Hidden-Blade-The-Heart-of-Blade-Duology-1-by-Sherry-Thomas.pdf
    • http://loaminoo.linkpc.net/3092096099090096/Bared-Blade-Fallen-Blade-2-by-Kelly-McCullough.pdf
    • http://loaminoo.linkpc.net/2095096094095/Blade-on-the-Hunt-Goddess-With-A-Blade-3-by-Lauren-Dane.pdf
    • http://loaminoo.linkpc.net/3092098092090098/Blade-Reforged-Fallen-Blade-4-by-Kelly-McCullough.pdf
    • http://loaminoo.linkpc.net/1099096093093094/Blade-to-the-Keep-Goddess-With-A-Blade-2-by-Lauren-Dane.pdf
    • http://loaminoo.linkpc.net/1095099097099097/Darkness-Hidden-The-Name-of-the-Blade-2-by-Zo-Marriott.pdf
    • http://loaminoo.linkpc.net/2098091097098090/Darkness-Hidden-The-Name-of-the-Blade-2-by-Zo-Marriott.pdf
    • http://loaminoo.linkpc.net/2093091098097092/The-Chronicles-of-Conan-Volume-8-Brothers-of-the-Blade-and-Other-Stories-by-Roy-Thomas.pdf
    • http://loaminoo.linkpc.net/2098095096096099/The-Name-of-the-Blade-The-Name-of-the-Blade-1-by-Zo-Marriott.pdf
    • http://loaminoo.linkpc.net/7096092091099095/Angel-Blade-Angel-Blade-1-by-Carrie-Merrill.pdf
    • http://loaminoo.linkpc.net/1095096093099091/The-Queen-s-Blade-The-Queen-s-Blade-1-by-T-C-Southwell.pdf
    • http://loaminoo.linkpc.net/3097090096093093/The-Blade-Itself-The-First-Law-1-by-Joe-Abercrombie.pdf
    • http://loaminoo.linkpc.net/2098090099092090/The-Blade-Itself-The-First-Law-1-by-Joe-Abercrombie.pdf
    • http://loaminoo.linkpc.net/3090090096090090/The-Crown-s-Blade-by-Jay-Di-Meo.pdf
    • http://loaminoo.linkpc.net/3092099093091/The-Blade-Itself-The-First-Law-1-by-Joe-Abercrombie.pdf
    • http://loaminoo.linkpc.net/3095092097093095/The-Tuesday-Blade-by-Bob-Ottum.pdf
    • http://loaminoo.linkpc.net/6090096097096/The-Blade-of-Eve-by-Shaun-Penney.pdf
    • http://loaminoo.linkpc.net/7096092091097090/Darwin-s-Blade-by-Dan-Simmons.pdf
    • http://loaminoo.linkpc.net/5090097091095097/Blade-Forged-in-Darkness-by-M-A-N-.pdf
    • http://loaminoo.linkpc.net/5098097097096090/The-Blade-of-the-Courtesans-by-Keiichir-Ry-.pdf
    • http://loaminoo.linkpc.net/2098090099092090/The-Blad

Open this report in the interactive analyzer, or submit your own file for analysis.