Malicious PDF — malware analysis report

Static analysis result for SHA-256 4e1f06d4cbc01666…

MALICIOUS

PDF

21.3 KB Created: 2019-05-02 05:20:49 +01:00 Authoring application: mPDF 5.7
MD5: f91c182c75adedbdf8c7ba5524540707 SHA-1: ef2e193589527295fa1d4bdf84b7f309b9b39108 SHA-256: 4e1f06d4cbc01666103ef1b60ad04ac3698d9d4a3afb96d7ea5f207fce424bd4
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links to external PDFs, identified as a link farm. The ML classifier also flagged this PDF as malicious. The primary goal appears to be directing users to a collection of URLs, likely for SEO manipulation or to host further malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1094090093094092/Around-the-Cragged-Hill-A-Personal-and-Political-Philosophy-by-George-F-Kennan.pdf
    • http://loaminoo.linkpc.net/5092090092091097/The-Kennan-Diaries-by-George-F-Kennan.pdf
    • http://loaminoo.linkpc.net/5091099090092090/George-F-Kennan-Cold-War-Iconoclast-by-Walter-L-Hixson.pdf
    • http://loaminoo.linkpc.net/9093093090095093/Russia-and-the-West-under-Lenin-and-Stalin-by-George-F-Kennan.pdf
    • http://loaminoo.linkpc.net/2093092090096/Soviet-American-Relations-Vol-1-Russia-Leaves-the-War-1917-1920-by-George-F-Kennan.pdf
    • http://loaminoo.linkpc.net/1098095095092091/Tent-Life-in-Siberia-An-Incredible-Account-of-Siberian-Adventure-Travel-and-Survival-by-George-Kennan.pdf
    • http://loaminoo.linkpc.net/9097097099090094/Geopoliticians-Henry-Kissinger-Zbigniew-Brzezinski-Samuel-P-Huntington-Karl-Haushofer-Sven-Hedin-George-F-Kennan-Carl-Schmitt-by-Books-LLC.pdf
    • http://loaminoo.linkpc.net/8092094091093093/The-Unrest-Journey-from-the-personal-to-political-by-Aicha-Amin.pdf
    • http://loaminoo.linkpc.net/6092090091090093/Political-Philosophy-The-Essential-Texts-by-Steven-M-Cahn.pdf
    • http://loaminoo.linkpc.net/9092093092096091/The-Ethics-of-Care-Personal-Political-and-Global-by-Virginia-Held.pdf
    • http://loaminoo.linkpc.net/1091091095092093091/Livy-s-Political-Philosophy-Power-and-Personality-in-Early-Rome-by-Ann-Vasaly.pdf
    • http://loaminoo.linkpc.net/9099093095095091/Between-Tradition-And-Revolution-The-Hegelian-Transformation-Of-Political-Philosophy-by-Manfred-Riedel.pdf
    • http://loaminoo.linkpc.net/6090092094092092/Confessions-of-a-Philosopher-A-Personal-Journey-Through-Western-Philosophy-from-Plato-to-Popper-by-Bryan-Magee.pdf
    • http://loaminoo.linkpc.net/4097098097096095/Nature-Ethics-An-Ecofeminist-Perspective-Studies-in-Social-Political-amp-Legal-Philosophy-by-Marti-Kheel.pdf
    • http://loaminoo.linkpc.net/9097092099099098/Personal-Justice-Jake-and-Annie-Lincoln-7-by-Rayven-T-Hill.pdf
    • http://loaminoo.linkpc.net/6091096093093092/A-History-of-Western-Philosophy-amp-its-Connection-with-Political-amp-Social-Circumstances-from-the-Earliest-Times-to-the-Present-Day-by-Bertrand-Russell.pdf
    • http://loaminoo.linkpc.net/8092098090091091/Strom-The-Complicated-Personal-and-Political-Life-of-Strom-Thurmond-by-Jack-Bass.pdf
    • http://loaminoo.linkpc.net/6099099093090094/Malraux-An-Essay-in-Political-Criticism-by-George-Marsh.pdf
    • http://loaminoo.linkpc.net/6098099096091092/Philosophy-in-Multiple-Voices-by-George-Yancy.pdf
    • http://loaminoo.linkpc.net/8098090098093/King-George-V-A-Personal-Memoir-by-John-Gore.pdf
    • http://loaminoo.linkpc.net/8092094091093093/The-Unre

Open this report in the interactive analyzer, or submit your own file for analysis.