Malicious PDF — malware analysis report

Static analysis result for SHA-256 52f76335df44d9ed…

MALICIOUS

PDF

13.7 KB Created: 2019-05-02 19:42:37 +01:00 Authoring application: mPDF 5.7
MD5: 05c7b6acdfb5f17f04ce20706d51cf3f SHA-1: a1d29699217e93e650e83095d8c95d827f4badf1 SHA-256: 52f76335df44d9ed15003b178c47a476d8a23059623fc04bcb06b10259856a2e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of external links, many of which are numeric slugs pointing to book titles. This suggests a link farm or SEO manipulation tactic. While the specific intent of the links is unclear due to benign reputation labels, the sheer volume and the critical heuristic firing indicate a malicious purpose, likely to distribute malware or engage in phishing. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2099091094095093/Blaze-of-Glory-Blaze-of-Glory-1-by-Sheryl-Nantus.pdf
    • http://loaminoo.linkpc.net/2098091098094097/Heroes-Without-Monsters-Within-Blaze-of-Glory-2-by-Sheryl-Nantus.pdf
    • http://loaminoo.linkpc.net/4096096099096095/Unfaded-Glory-Home-to-Glory-2-by-Sara-Arden.pdf
    • http://loaminoo.linkpc.net/6092094098096/Your-Husband-My-Man-by-K-C-Blaze.pdf
    • http://loaminoo.linkpc.net/5097096091096/Your-Husband-My-Man-3-by-K-C-Blaze.pdf
    • http://loaminoo.linkpc.net/2092094096098092/Love-and-Other-Games-by-Ana-Blaze.pdf
    • http://loaminoo.linkpc.net/3093096095092093/Blaze-by-Richard-Bachman.pdf
    • http://loaminoo.linkpc.net/1098090095096097/Billy-And-Blaze-A-Boy-And-His-Pony-by-C-W-Anderson.pdf
    • http://loaminoo.linkpc.net/3090091097098095/Blaze-Storm-MC-2-5-by-Nina-Levine.pdf
    • http://loaminoo.linkpc.net/2099093092097090/Stepbrother-Inked-by-Violet-Blaze.pdf
    • http://loaminoo.linkpc.net/2093096098093099/Blaze-Finds-the-Trail-by-C-W-Anderson.pdf
    • http://loaminoo.linkpc.net/4093094091093092/Hush-Harlequin-Blaze-178-by-Jo-Leigh.pdf
    • http://loaminoo.linkpc.net/1090095099095094098/As-Bad-as-Can-Be-Under-the-Covers-Harlequin-Blaze-86-by-Kristin-Hardy.pdf
    • http://loaminoo.linkpc.net/2094093092094090/Blaze-Finds-Forgotten-Roads-by-C-W-Anderson.pdf
    • http://loaminoo.linkpc.net/4095096095096092/Craved-Devil-s-Blaze-MC-1-5-by-Jordan-Marie.pdf
    • http://loaminoo.linkpc.net/9097092093099092/Still-Irresistible-Harlequin-Blaze-456-by-Dawn-Atkins.pdf
    • http://loaminoo.linkpc.net/1099090091096096/Shafted-Devil-s-Blaze-MC-4-by-Jordan-Marie.pdf
    • http://loaminoo.linkpc.net/3090098098092094/Blaze-The-Stark-Affair-3-by-Skylar-Cross.pdf
    • http://loaminoo.linkpc.net/1091095096095094090/Out-Of-Control-Harlequin-Blaze-459-by-Julie-Miller.pdf
    • http://loaminoo.linkpc.net/4097098097092090/Dawson-s-Fall-Welcome-to-Covendale-5-by-Morgan-Blaze.pdf
    • http://loaminoo.linkpc.net/2094093092094090/Blaze-Finds-Forgotten-Roads-by-C-W

Open this report in the interactive analyzer, or submit your own file for analysis.