Malicious PDF — malware analysis report

Static analysis result for SHA-256 4fd7a0dddf464fad…

MALICIOUS

PDF

17.2 KB Created: 2019-04-30 09:00:34 +01:00 Authoring application: mPDF 5.7
MD5: e3718d053656c617caba5f501dda90ea SHA-1: 0f15906813d94a57fb4bebf4aab26abb893f8788 SHA-256: 4fd7a0dddf464fad273b5b0d795dd52e4107b4379c7ac7516657ab204699da9a
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF file contains a large number of embedded links to external PDF documents, all hosted on the same dynamic DNS domain. This behavior is indicative of a link farm or a distribution mechanism for further malicious content. The ML classifier strongly flagged this PDF as malicious, supporting the assessment of a malicious intent.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090092090096099099/Erinnerungen-das-Leben-Dostojewskis-in-den-Aufzeichnungen-seiner-Frau-by-Anna-Grigoryevna-Dostoyevskaya.pdf
    • http://loaminoo.linkpc.net/6099095098099095/Dostoevsky-Letters-And-Reminiscences-by-Fyodor-Dostoyevsky.pdf
    • http://loaminoo.linkpc.net/6099095098092091/Reminiscences-of-My-Boyhood-by-Reminiscences.pdf
    • http://loaminoo.linkpc.net/9097097094090092/Midnight-in-Dostoevsky-by-Don-DeLillo.pdf
    • http://loaminoo.linkpc.net/5094099093099090/Dostoevsky-by-Andr-Gide.pdf
    • http://loaminoo.linkpc.net/5091092097091090/A-Curse-on-Dostoevsky-by-Atiq-Rahimi.pdf
    • http://loaminoo.linkpc.net/6093094096093096/Dostoevsky-Tolstoy-and-Nietzsche-by-Lev-Shestov.pdf
    • http://loaminoo.linkpc.net/6092096098091096/Problems-of-Dostoevsky-s-Poetics-by-Mikhail-Bakhtin.pdf
    • http://loaminoo.linkpc.net/5099090092095091/Dostoevsky-Kierkegaard-Nietzsche-and-Kafka-by-William-Hubben.pdf
    • http://loaminoo.linkpc.net/2091093094093/Dostoevsky-The-Years-of-Ordeal-1850-1859-by-Joseph-Frank.pdf
    • http://loaminoo.linkpc.net/2091099093096/Dostoevsky-The-Stir-of-Liberation-1860-1865-by-Joseph-Frank.pdf
    • http://loaminoo.linkpc.net/8099091097096097/Redemption-and-the-Merchant-God-Dostoevsky-s-Economy-of-Salvation-and-Antisemitism-by-Susan-McReynolds.pdf
    • http://loaminoo.linkpc.net/1091097090097099099/Bankrupts-and-Usurers-of-Imperial-Russia-Debt-Property-and-the-Law-in-the-Age-of-Dostoevsky-and-Tolstoy-by-Sergei-Antonov.pdf
    • http://loaminoo.linkpc.net/6091097092099091/Anna-of-All-the-Russias-A-Life-of-Anna-Akhmatova-by-Elaine-Feinstein.pdf
    • http://loaminoo.linkpc.net/6099095098091098/Reminiscences-by-Douglas-MacArthur.pdf
    • http://loaminoo.linkpc.net/7091092091093097/Ask-Anna-Advice-for-the-Furry-and-Forlorn-by-Anna-Koontz.pdf
    • http://loaminoo.linkpc.net/2098096092096098/Great-Short-Works-of-Fyodor-Dostoevsky-by-Fyodor-Dostoyevsky.pdf
    • http://loaminoo.linkpc.net/6098094099091090/The-Reminiscences-of-a-Marine-by-John-A-Lejeune.pdf
    • http://loaminoo.linkpc.net/2095095094098091/Reminiscences-of-the-War-by-Philip-Francis-Brown.pdf
    • http://loaminoo.linkpc.net/6099095098093093/Reminiscences-Of-A-Rebel-by-Wayland-F-Dunaway.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.