Malicious PDF — malware analysis report

Static analysis result for SHA-256 483725112d96c667…

MALICIOUS

PDF

17.6 KB Created: 2019-05-07 04:01:02 +01:00 Authoring application: mPDF 5.7
MD5: 2852681efdb6adb4f20fd68ab0831b9c SHA-1: 5108b4fcb0df0785c5dfb3f265e0ab41022af8db SHA-256: 483725112d96c667a297d209ba34e54f3d90627dcd4d2393dc2e92fadebe1ee0
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF file was flagged by a machine learning classifier as malicious. Static analysis revealed a large number of embedded external links, characteristic of a link farm designed to manipulate search engine results or distribute further malicious content. The primary heuristic identified a PDF_SEO_LINK_FARM, indicating a mass of external PDF links, with 'loaminoo.linkpc.net' being the dominant host. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9931

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.li
    • http://loaminoo.linkpc.net/9099094092099095/Black-Is-the-New-White-by-Paul-Mooney.pdf
    • http://loaminoo.linkpc.net/9090098091092094/White-Hero-Black-Beast-Racism-Sexism-and-the-Mask-of-Masculinity-by-Paul-Hoch.pdf
    • http://loaminoo.linkpc.net/2091096097096097/White-Women-the-Sex-Black-Men-Love-Why-White-Women-Are-Those-Choice-for-Cheating-Black-Men-by-Raymoni-Love.pdf
    • http://loaminoo.linkpc.net/2091096098091099/White-Women-The-Sex-Black-Men-Love-Why-White-Women-Is-the-Choice-for-Cheating-Black-Men-by-Raymoni-Love.pdf
    • http://loaminoo.linkpc.net/3090094094093092/Only-the-Ball-Was-White-A-History-of-Legendary-Black-Players-and-All-Black-Professional-Teams-by-Robert-W-Peterson.pdf
    • http://loaminoo.linkpc.net/3090092091097092/White-on-Black-on-White-by-Coleman-Dowell.pdf
    • http://loaminoo.linkpc.net/9092095094098098/White-Lies-and-Black-Markets-Evading-Metropolitan-Authority-in-Colonial-Suriname-1650-1800-by-Karwan-Fatah-Black.pdf
    • http://loaminoo.linkpc.net/1091092091094097093/Irritable-Bodies-and-Postmodern-Subjects-in-Pynchon-Puig-Volponi-by-Giorgio-Mobili.pdf
    • http://loaminoo.linkpc.net/8094094094092099/Midi-For-The-Technophobe-by-Paul-White.pdf
    • http://loaminoo.linkpc.net/4097092091098097/White-Heat-by-Paul-D-Marks.pdf
    • http://loaminoo.linkpc.net/1091099090099096094/Not-Quite-Black-And-White-Not-Quite-1-by-Jonathan-Ying.pdf
    • http://loaminoo.linkpc.net/1099098095099098/Not-Just-Black-and-White-by-Lesley-Williams.pdf
    • http://loaminoo.linkpc.net/4095099096097098/Black-and-White-by-Gilbert-Sorrentino.pdf
    • http://loaminoo.linkpc.net/7092092091091096/My-Life-In-Black-And-White-by-Kim-Izzo.pdf
    • http://loaminoo.linkpc.net/2094099095095097/Black-and-White-by-Paige-Notaro.pdf
    • http://loaminoo.linkpc.net/1092094092090090/Ashen-Black-Dawn-1-by-P-J-White.pdf
    • http://loaminoo.linkpc.net/2091095098096095/Black-and-White-Vol-1-by-Taiyo-Matsumoto.pdf
    • http://loaminoo.linkpc.net/3094095097099098/The-Black-And-White-Of-It-by-Ann-Allen-Shockley.pdf
    • http://loaminoo.linkpc.net/4090095094096097/Black-and-White-by-Tiffany-Madison.pdf
    • http://loaminoo.linkpc.net/3091097099092096/Black-Cat-White-Cat-by-Silvia-Borando.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.