Malicious PDF — malware analysis report

Static analysis result for SHA-256 4ae8d2892165db18…

MALICIOUS

PDF

16.0 KB Created: 2019-05-02 19:26:36 +01:00 Authoring application: mPDF 5.7
MD5: 0e4a1665188a991c26ec1eb09a91e3e4 SHA-1: 57a93dfd93b104503419d50bf31c242aa7dcf74e SHA-256: 4ae8d2892165db1836c2ea052c4f00abc7ee304ac60f726b46bece9c8adca2b2
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of embedded links, a technique often used for SEO manipulation or to distribute further malicious content. While the document body is heavily corrupted, the presence of numerous links to external PDFs, such as http://loaminoo.linkpc.net/8090093097091/The-Communist-Manifesto-and-Other-Revolutionary-Writings-Marx-Marat-Paine-Mao-Gandhi-and-Others-by-Bob-Blaisdell.pdf, suggests a link farm or redirection strategy. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8090093097091/The-Communist-Manifesto-and-Other-Revolutionary-Writings-Marx-Marat-Paine-Mao-Gandhi-and-Others-by-Bob-Blaisdell.pdf
    • http://loaminoo.linkpc.net/6095099097099096/The-Communist-Manifesto-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/6099099092095096/Communist-Manifesto-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/1090098098099092096/The-Communist-Manifesto-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/7092098099091093/The-Communist-Manifesto-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/6099099097098096/The-Communist-Manifesto-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/5098099092094090/The-Communist-Manifesto-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/6090099099095093/The-Communist-Manifesto-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/3099093097093092/The-Communist-Manifesto-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/7096096098092092/The-Communist-Manifesto-with-Related-Documents-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/6090092096090098/A-Kommunista-Kialtvany-The-Communist-Manifesto-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/5098098092091096/Manifesto-of-the-Communist-Party-The-Original-Classics---Illustrated-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/8097097090093/Common-Sense-The-Rights-of-Man-and-Other-Essential-Writings-by-Thomas-Paine.pdf
    • http://loaminoo.linkpc.net/1090091096095094090/Manifesto-do-Partido-Comunista-1848-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/7094094097096096/Manifes-Kominis-La-The-Comunist-Manifesto-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/5096098098097099/The-Revolutionary-Ideas-of-Karl-Marx-by-Alex-Callinicos.pdf
    • http://loaminoo.linkpc.net/5096098098094098/Selected-Writings-by-Karl-Marx.pdf
    • http://loaminoo.linkpc.net/3097091090092091/Revolutionary-Writings-1775-1783-by-John-Adams.pdf
    • http://loaminoo.linkpc.net/3097091090091095/Revolutionary-Writings-1755-1775-by-John-Adams.pdf
    • http://loaminoo.linkpc.net/3092094095099097/Two-Alone-Two-Together-Letters-Between-Indira-Gandhi-amp-amp-Jawaharlal-Nehru-1940-64-by-Sonia-Gandhi.pdf
    • http://loaminoo.linkpc.net/7096096098092092/The-Communist-Manifesto-with-Related-Documen

Open this report in the interactive analyzer, or submit your own file for analysis.