Malicious PDF — malware analysis report

Static analysis result for SHA-256 4d40bb0d25364bf2…

MALICIOUS

PDF

15.0 KB Created: 2019-05-02 00:18:39 +01:00 Authoring application: mPDF 5.7
MD5: b21acae7b5927071759901f99537ba4d SHA-1: c6ea4703d4d7dc8f6f2251bd27a0ee5aabe2b81f SHA-256: 4d40bb0d25364bf2e8a4c079417692836b9ff097fb5f1ba39998c17ca94925ee
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this PDF as malicious. The embedded links, such as http://loaminoo.linkpc.net/3099096092096093/Betty-Before-X-by-Ilyasah-Shabazz.pdf, are likely intended to redirect users to malicious websites or for SEO spam purposes. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3099096092096093/Betty-Before-X-by-Ilyasah-Shabazz.pdf
    • http://loaminoo.linkpc.net/1099091099090099/Small-Bamboo-Growing-Up-and-Growing-Old-With-My-Vietnamese-Australian-Family-by-Tracy-Vo.pdf
    • http://loaminoo.linkpc.net/9098093096090/Growing-Up-in-Levittown-Again-Growing-Up-in-Levittown-Again-1-by-Molly-Maguire-McGill.pdf
    • http://loaminoo.linkpc.net/8090090099096/A-Growing-Season-by-Sue-Boggio.pdf
    • http://loaminoo.linkpc.net/1091096099093091/The-Growing-by-Susanne-M-Beck.pdf
    • http://loaminoo.linkpc.net/1090099093099095/Well-This-Is-Growing-Up-by-Megan-Street.pdf
    • http://loaminoo.linkpc.net/4096098096097094/Growing-Up-by-Clarissa-Carlyle.pdf
    • http://loaminoo.linkpc.net/1091093098091094/Growing-Up-with-the-River-by-Dan-Burkhardt.pdf
    • http://loaminoo.linkpc.net/4094098098092092/Growing-Up-Twice-by-Rowan-Coleman.pdf
    • http://loaminoo.linkpc.net/6094092093091096/Growing-Pains-by-N-H-Kleinbaum.pdf
    • http://loaminoo.linkpc.net/9094092093090097/Growing-Closer-to-God-Ldr-by-Jessie-Schut.pdf
    • http://loaminoo.linkpc.net/3093093090098096/Growing-a-New-Tail-by-Lisa-C-Taylor.pdf
    • http://loaminoo.linkpc.net/5098091094097092/Growing-Up-in-Slavery-by-Sylviane-A-Diouf.pdf
    • http://loaminoo.linkpc.net/9098091097090098/Growing-In-Joy-God-s-Way-To-Increase-Joy-In-All-Of-Life-by-Ron-Klug.pdf
    • http://loaminoo.linkpc.net/4093098094094/Tweak-Growing-Up-On-Methamphetamines-by-Nic-Sheff.pdf
    • http://loaminoo.linkpc.net/5091099099095/Growing-Seasons-by-Elsie-Lee-Splear.pdf
    • http://loaminoo.linkpc.net/6094092091092090/Growing-Up-Amish-A-Memoir-by-Ira-Wagler.pdf
    • http://loaminoo.linkpc.net/6094097098096099/Growing-Up-Claus-by-Corina-Zurcher.pdf
    • http://loaminoo.linkpc.net/4092096093093096/Tweak-Growing-Up-on-Methamphetamines-by-Nic-Sheff.pdf
    • http://loaminoo.linkpc.net/2099095092099095/Sorry-Not-Sorry-Dreams-Mistakes-and-Growing-Up-by-Naya-Rivera.pdf
    • http://loaminoo.linkpc.net/6094092093091096/Growing-Pains-b

Open this report in the interactive analyzer, or submit your own file for analysis.