Malicious PDF — malware analysis report

Static analysis result for SHA-256 4ded61baef0e7b61…

MALICIOUS

PDF

39.4 KB Created: 2019-05-04 13:40:47 +01:00 Authoring application: mPDF 5.7
MD5: 1cd4df82047cc5008e1bdd344ad00a01 SHA-1: 52dfde9cdef5d6ad5979a9b3eeb8214489b54156 SHA-256: 4ded61baef0e7b611b8d9d765b9e9faffa67ef151e77cb324d3aff260c9e049b
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded external links, forming a link farm. The primary heuristic indicates this is a "PDF_SEO_LINK_FARM" designed to generate traffic or potentially lead users to malicious content. While the extracted URLs themselves are currently marked as benign, the sheer volume and structure suggest a malicious intent to redirect users. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9665

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8092099095091093/Foreign-Language-Study-book-quot-Idiot-quot-Vocabulary-in-English-Explanatory-notes-in-English-Essay-in-English-illustrated-annotated-Foreign-Language-Study-books-Russian-Edition-by-Fyodor-Dostoyevsky.pdf
    • http://loaminoo.linkpc.net/8090098090091098/The-Mysterious-Affair-at-Styles-Annotated-English-as-a-Second-or-Foreign-Language-Edition-by-Lazlo-Ferran-Classics-Adapted-by-a-Qualified-Teacher-Book-2-by-Agatha-Christie.pdf
    • http://loaminoo.linkpc.net/2097092091093097/A-Certain-quot-je-Ne-Sais-Quoi-quot-The-Origin-of-Foreign-Words-Used-in-English-by-Chloe-Rhodes.pdf
    • http://loaminoo.linkpc.net/4095092092092098/Flowers-of-Evil-and-Other-Works-Les-Fleurs-du-Mal-et-Oeuvres-Choisies-A-Dual-Language-Book-Dover-Foreign-Language-Study-Guides-by-Charles-Baudelaire.pdf
    • http://loaminoo.linkpc.net/6090098090094094/English-as-a-Foreign-Language-Teachers-Tpack-Emerging-Research-and-Opportunities-by-Mehrak-Rahimi.pdf
    • http://loaminoo.linkpc.net/1090097098097092097/Seventeen-Shorts-Kurze-amp-quot-The-Art-of-Writing-Shorts-quot---A-Dual-Language-Reader-English---German-by-Jutta-Mahlke-M-a.pdf
    • http://loaminoo.linkpc.net/1090094098091099099/A-Study-in-Scarlet-GCSE-English-Illustrated-Student-Edition-with-Wide-Annotation-Friendly-Margins-by-Arthur-Conan-Doyle.pdf
    • http://loaminoo.linkpc.net/5097095097097097/Mandarin-Language-Guide-to-Conversation-in-French-English-and-Chinese-Containing-a-Vocabulary-and-Familiar-Dialogues-by-S-raphin-Couvreur.pdf
    • http://loaminoo.linkpc.net/9097092096096098/Pygmalion-Illustrated-Edition-A-Satirical-Take-on-English-Language-and-Englishmen-From-the-Author-of-Renowned-Plays-like-Mrs-Warren-s-Profession-Arms-Caesar-And-Cleopatra-Man-and-Superman-by-George-Bernard-Shaw.pdf
    • http://loaminoo.linkpc.net/5090094091095096/Words-Their-Way-with-English-Learners-Word-Study-for-Phonics-Vocabulary-and-Spelling-by-Lori-R-Helman.pdf
    • http://loaminoo.linkpc.net/8095092092094095/Perspective-in-Architecture-and-Painting-An-Unabridged-Reprint-of-the-English-and-Latin-Edition-of-the-1693-quot-Perspectiva-Pictorum-Et-Architectorum-quot-by-Andrea-Pozzo.pdf
    • http://loaminoo.linkpc.net/7094092097098095/Joachim-Du-Bellay-The-Regrets-quot-with-quot-the-Antiquities-of-Rome-quot-Three-Latin-Elegies-and-quot-the-Defense-and-Enrichment-of-the-French-Language-quot-a-Bilingual-Edition-university-of-Pennsylvania-Press-bb-09-12-2006-lco003000-12-75-00-ip-short-01-01-by-Joachim-Du-Bellay.pdf
    • http://loaminoo.linkpc.net/2093098094098092/Globish-How-the-English-Language-Became-the-World-s-Language-by-Robert-McCrum.pdf
    • http://loaminoo.linkpc.net/2095095096092095/The-English-Language-A-Guided-Tour-of-the-Language-by-David-Crystal.pdf
    • http://loaminoo.linkpc.net/5096097098099092/The-Gallic-Wars---La-Guerre-des-Gaules---French-English-Bilingual-Edition-French-English-Bilingual-Edition-Illustrated-of-Julius-Caesar-De-Bello-Gallico-Point-Media-Publishing---History-Book-1-by-Gaius-Julius-Caesar.pdf
    • http://loaminoo.linkpc.net/3095092095095092/English-Language-Learners-and-the-New-Standards-Developing-Language-Content-Knowledge-and-Analytical-Practices-in-the-Classroom-by-Margaret-Heritage.pdf
    • http://loaminoo.linkpc.net/7092091095098094/The-Idiot-Illustrated-Platinum-Edition-Free-Audiobook-Included-by-Fyodor-Dostoyevsky.pdf
    • http://loaminoo.linkpc.net/4095098092092095/The-Old-English-Elegies-A-Critical-Edition-and-Genre-Study-by-Anne-L-Klinck.pdf
    • http://loaminoo.linkpc.net/5098091095099096/Computer-Learner-Corpora-Second-Language-Acquisition-and-Foreign-Language-Teaching-by-Sylviane-Granger.pdf
    • http://loaminoo.linkpc.net/5096097094098/One-Child-Two-Languages-A-Guide-for-Early-Childhood-Educators-of-Children-Learning-English-as-a-Second-Language-Second-Edition-by-Patton-O-Tabors.pdf
    • http://loaminoo.linkpc.net/8090098090091098/The-Mysterious-Affair-at-Styles-Annotated-English-as-a-S

Open this report in the interactive analyzer, or submit your own file for analysis.