Malicious PDF — malware analysis report

Static analysis result for SHA-256 4a84022d978f91e5…

MALICIOUS

PDF

14.7 KB Created: 2019-05-02 05:32:28 +01:00 Authoring application: mPDF 5.7
MD5: 271628e2dacfde2de1f0790fe7b6d105 SHA-1: 3df177c2ced0c0ed422dea329f1478d8091d0ac5 SHA-256: 4a84022d978f91e5c67867d757aee019b8f013f7a0890b04ec62c7eafc921881
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. The ML classifier also strongly indicated maliciousness. The embedded URLs, while appearing to link to book titles, are part of a link farm likely intended to manipulate search engine results or redirect users to malicious sites. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2091093091099098/The-Coming-Storm-Heirs-of-Montana-2-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/2093095090091090/Land-of-My-Heart-Heirs-of-Montana-1-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/1095092097092095/The-Pattern-of-Her-Heart-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/2093094099094092/A-Daughter-s-Inheritance-The-Broadmoor-Legacy-1-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/5090090091097096/Dawn-s-Prelude-Song-of-Alaska-1-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/3098098099092092/In-Times-Gone-By-Golden-Gate-Secrets-3-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/2093095092096092/Chasing-the-Sun-Land-of-the-Lone-Star-1-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/4091096093098097/A-Sensible-Arrangement-Lone-Star-Brides-1-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/2093094099094094/A-Promise-to-Believe-In-The-Brides-of-Gallatin-County-1-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/1093093093097099/Shadows-of-the-Canyon-Desert-Roses-1-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/2097097092099090/Rivers-of-Gold-Yukon-Quest-3-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/2093094099093096/Treasures-of-the-North-Yukon-Quest-1-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/3096095098096094/Cherished-Mercy-Heart-of-the-Frontier-3-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/1093093098090098/An-Unexpected-Love-The-Broadmoor-Legacy-2-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/5099091090093/Hope-Rekindled-Striking-a-Match-3-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/5090090092096093/Summer-of-the-Midnight-Sun-Alaskan-Quest-1-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/7092092095098095/Touching-the-Sky-Land-of-the-Lone-Star-2-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/2093095090098099/To-Love-and-Cherish-Bridal-Veil-Island-2-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/1095092094094098/Refining-Fire-Brides-of-Seattle-Book-2-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/4091096094091090/A-Matter-of-Heart-Lone-Star-Brides-3-by-Tracie-Peterson.pdf
    • http://loaminoo.linkpc.net/2093094099093096/Treasures-of-the-North-Yukon-Quest-1-by-Tracie-Pe

Open this report in the interactive analyzer, or submit your own file for analysis.