Malicious PDF — malware analysis report

Static analysis result for SHA-256 4540b1b9307d1ac6…

MALICIOUS

PDF

16.5 KB Created: 2019-05-07 03:58:21 +01:00 Authoring application: mPDF 5.7
MD5: 9bad5de25f622efd3163d4bd7db8b46f SHA-1: 33e80d610aa17ba2578e1bb9180df64239156cca SHA-256: 4540b1b9307d1ac63e25f8484e9fc74a9cdf2b2c724fad12de33b259e1095b04
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF was flagged by a machine learning classifier and contains a large number of external links, indicating a link farm. The embedded URLs point to various book titles, likely as a lure to disguise the malicious intent. No scripts were extracted, and the document body was heavily obfuscated, preventing a deeper analysis of the specific lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3096096093095095/Club-Girl-Hell-Brigade-Motorcycle-Club-Book-1-by-Evelyn-Glass.pdf
    • http://loaminoo.linkpc.net/1096091096096099/Hell-s-Angel-The-Life-and-Times-of-Sonny-Barger-and-the-Hell-s-Angels-Motorcycle-Club-by-Ralph-Barger.pdf
    • http://loaminoo.linkpc.net/3093091098092099/Crazy-Little-Town-Called-love-The-To-Hell-And-Back-Club-Series-Book-Two-by-Jill-Hannah-Anderson.pdf
    • http://loaminoo.linkpc.net/4091094099099097/Know-Me-Defiant-Motorcycle-Club-1-by-Cora-Brent.pdf
    • http://loaminoo.linkpc.net/4095096097092095/Family-The-Club-Girl-Diaries-Book-5-by-Addison-Jane.pdf
    • http://loaminoo.linkpc.net/3096094096093095/Coming-Out-Hawks-Motorcycle-Club-4-5-by-Lila-Rose.pdf
    • http://loaminoo.linkpc.net/6097093099095098/The-Libertines-Motorcycle-Club-An-Outlaw-Is-Born-by-Max-L-Billington.pdf
    • http://loaminoo.linkpc.net/6091090091090/The-Black-Goat-Motorcycle-Club-by-Jason-Murphy.pdf
    • http://loaminoo.linkpc.net/2096098096092092/Wrapped-Around-Him-Moroad-Motorcycle-Club-1-by-Debra-Kayn.pdf
    • http://loaminoo.linkpc.net/1093093094093092/Promise-Me-Defiant-Motorcycle-Club-2-by-Cora-Brent.pdf
    • http://loaminoo.linkpc.net/4095096096098098/Original-Sin-Dark-Saints-Motorcycle-Club-1-by-Amy-Love.pdf
    • http://loaminoo.linkpc.net/7099097092091096/Black-Out-Hawks-Motorcycle-Club-3-by-Lila-Rose.pdf
    • http://loaminoo.linkpc.net/1094095094090096/Holding-Out-Hawks-Motorcycle-Club-1-by-Lila-Rose.pdf
    • http://loaminoo.linkpc.net/2096093096099098/Lilith-Lucifer-s-Legion-Motorcycle-Club-1-by-Kelli-Maine.pdf
    • http://loaminoo.linkpc.net/4095095099090091/Taming-Blaze-Inferno-Motorcycle-Club-1-by-Sabrina-Paige.pdf
    • http://loaminoo.linkpc.net/4095096093091095/Situation-Normal-Lima-Six-Motorcycle-Club-2-by-Kathryn-Thomas.pdf
    • http://loaminoo.linkpc.net/1098098099093092/Claiming-His-Beauty-Feral-Breed-Motorcycle-Club-4-by-Ellis-Leigh.pdf
    • http://loaminoo.linkpc.net/4095096097093095/Claiming-His-Desire-Feral-Breed-Motorcycle-Club-6-by-Ellis-Leigh.pdf
    • http://loaminoo.linkpc.net/2099091098098099/Game-Changer-Hells-Saints-Motorcycle-Club-1-by-Paula-Marinaro.pdf
    • http://loaminoo.linkpc.net/2099098099094091/Bash-Volume-III-Rolling-Thunder-Motorcycle-Club-5-by-Candace-Blevins.pdf
    • http://loaminoo.linkpc.net/2096098096092092/Wrapped-Around-Him-Moroad-Motorcycle-Club-1

Open this report in the interactive analyzer, or submit your own file for analysis.