Malicious PDF — malware analysis report

Static analysis result for SHA-256 530968ae41548a42…

MALICIOUS

PDF

23.3 KB Created: 2019-04-30 03:36:36 +01:00 Authoring application: mPDF 5.7
MD5: fd55fa1ffc1a86b098a6934178194ef7 SHA-1: 5c47ef6cd52c9108026d50fd3a6cb5c76fdbdfce SHA-256: 530968ae41548a420dd4a20d5266465af861411f73ffeab7257e13a627d56e16
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDFs hosted on the domain loaminoo.linkpc.net. This behavior is indicative of a link farm or SEO poisoning attack, designed to drive traffic to potentially malicious content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9901

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8096098090096/Death-to-the-Pigs-Selected-Writings-of-Benjamin-Peret-by-Benjamin-P-ret.pdf
    • http://loaminoo.linkpc.net/1091098099096096099/Walter-Benjamin-Selected-Writings-Volume-1-1913-1926-by-Walter-Benjamin.pdf
    • http://loaminoo.linkpc.net/4092093094098092/Language-Thought-and-Reality-Selected-Writings-of-Benjamin-Lee-Whorf-by-Benjamin-Lee-Whorf.pdf
    • http://loaminoo.linkpc.net/7094098097096098/Walter-Benjamin-Selected-Writings-4-1938-1940-by-Walter-Benjamin.pdf
    • http://loaminoo.linkpc.net/4091094096099091/Memoirs-of-Benjamin-Franklin-Written-by-Himself-Vol-1-of-2-With-His-Most-Interesting-Essays-Letters-and-Miscellaneous-Writings-Familiar-Moral-Political-Economical-and-Philosophical-by-Benjamin-Franklin.pdf
    • http://loaminoo.linkpc.net/9096094097096091/Benjamin-Franklins-Leben-Die-Autobiografie---Vollst-ndige-deutsche-Ausgabe-by-Benjamin-Franklin.pdf
    • http://loaminoo.linkpc.net/5093095093091097/Lucy-Green-Eyes-The-Story-of-Merlene-McDaniel-Benjamin-by-Paulette-Benjamin.pdf
    • http://loaminoo.linkpc.net/8092099093096095/Benjamin-Va-A-L-Ecole-Benjamin-Goes-to-School-by-Paulette-Bourgeois.pdf
    • http://loaminoo.linkpc.net/8092092090097090/Early-Writings-1910-1917-by-Walter-Benjamin.pdf
    • http://loaminoo.linkpc.net/3099093097096095/Benjamin-Manry-and-the-Curse-of-Blood-Bones-Book-One-of-the-Adventures-of-Benjamin-Manry-by-Owen-Palmiotti.pdf
    • http://loaminoo.linkpc.net/9091098094090097/The-Autobiography-of-Benjamin-Franklin---Original-amp-Unabridged-University-Of-Chicago-Press-ANNOTATED-by-Benjamin-Franklin.pdf
    • http://loaminoo.linkpc.net/8090097091090091/Benjamin-Franklin-My-Autobiography-The-Editions-Artisan-Devereaux-Classic-Literature-Series-by-Benjamin-Franklin.pdf
    • http://loaminoo.linkpc.net/6092096098099096/The-Curious-Case-of-Benjamin-Button---Kisah-Aneh-Benjamin-Button-by-F-Scott-Fitzgerald.pdf
    • http://loaminoo.linkpc.net/3099090099091090/Benjamin-Manry-and-the-Crimson-Journal-Book-Two-of-the-Adventures-of-Benjamin-Manry-by-Owen-Palmiotti.pdf
    • http://loaminoo.linkpc.net/4095093093091093/Benjamin-Franklin-and-a-Case-of-Christmas-Murder-Benjamin-Franklin-2-by-Robert-Lee-Hall.pdf
    • http://loaminoo.linkpc.net/5099096095096092/Memoir-of-Colonel-Benjamin-Tallmadge-1858-by-Benjamin-Tallmadge.pdf
    • http://loaminoo.linkpc.net/7094098098098097/The-Correspondence-of-Walter-Benjamin-1910-1940-by-Walter-Benjamin.pdf
    • http://loaminoo.linkpc.net/6094092091091097/Autobiography-of-Benjamin-Franklin-with-an-introduction-by-Verner-W-by-Benjamin-Franklin.pdf
    • http://loaminoo.linkpc.net/9090094097094092/Green-Arrow-Volume-1-The-Death-and-Life-of-Oliver-Queen-by-Benjamin-Percy.pdf
    • http://loaminoo.linkpc.net/3097093090092094/Ali-Benjamin-Untitled-1-by-Ali-Benjamin.pdf
    • http://loaminoo.linkpc.net/4091

Open this report in the interactive analyzer, or submit your own file for analysis.