Malicious PDF — malware analysis report

Static analysis result for SHA-256 57062c49a1b515fc…

MALICIOUS

PDF

17.3 KB Created: 2019-05-02 05:21:07 +01:00 Authoring application: mPDF 5.7
MD5: f64b3d1dbda7945579b7a37af5b93f91 SHA-1: 72aa1d052bed584992a23c47ca61098699a71ab6 SHA-256: 57062c49a1b515fc0f1bdef07f83b65f66d275e939e98e6ec4a8d6efe76fdf32
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While the URLs themselves are currently flagged as benign, the sheer volume and structure suggest a malicious intent, likely for SEO poisoning or to redirect users to malicious sites. The ML classifier also strongly indicated maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1096092091094094/A-Sides-and-B-Sides-by-Evan-Brown.pdf
    • http://loaminoo.linkpc.net/1095098091093093/Both-Sides-of-the-Fence-Both-Sides-of-the-Fence-1-by-M-T-Pope.pdf
    • http://loaminoo.linkpc.net/1092094092092099/Kilingiri-by-Janna-Gray.pdf
    • http://loaminoo.linkpc.net/6092097099095093/The-Ocean-Inside-by-Janna-McMahan.pdf
    • http://loaminoo.linkpc.net/3092098091094093/Circle-of-Nine-Novella-Collection-Circle-of-Nine-Series-2-by-Valerie-Biel.pdf
    • http://loaminoo.linkpc.net/2090096099090095/Behind-the-Rage-Clan-Destiny-2-by-Janna-Hill.pdf
    • http://loaminoo.linkpc.net/3095090096098097/The-Circle-Series-in-One-Epic-Edition-The-Circle-0-3-by-Ted-Dekker.pdf
    • http://loaminoo.linkpc.net/1095097096092099/Quintessential-Style-Cultivate-and-Communicate-Your-Signature-Look-by-Janna-Beatty.pdf
    • http://loaminoo.linkpc.net/2099095095/Black-Hole-Blues-and-Other-Songs-from-Outer-Space-by-Janna-Levin.pdf
    • http://loaminoo.linkpc.net/9091096097094093/A-m-sica-do-universo-Ondas-gravitacionais-e-a-maior-descoberta-cient-fica-dos-ltimos-cem-anos-by-Janna-Levin.pdf
    • http://loaminoo.linkpc.net/6090097094097090/Pi-Monads-And-The-Quasi-Circle-Theory-A-Theory-On-The-Circle-More-Appropriate-To-The-Space-Age-by-Lionel-Fabius.pdf
    • http://loaminoo.linkpc.net/1090095090096096091/XXL-Leseprobe-Spionin-wider-Willen-Fall-1-f-r-Markus-Neumann-und-Janna-Berg-Teil-1-German-Edition-by-Mila-Roth.pdf
    • http://loaminoo.linkpc.net/2099093090098099/The-Center-Circle-Book-1-in-The-Center-Circle-Chronicles-by-Steve-Biddison.pdf
    • http://loaminoo.linkpc.net/4093092097091090/Off-Sides-by-Dianne-Hartsock.pdf
    • http://loaminoo.linkpc.net/2095099097091096/The-Circle-of-Ceridwen-Circle-of-Ceridwen-Saga-1-by-Octavia-Randolph.pdf
    • http://loaminoo.linkpc.net/3094095092091096/The-Sister-Circle-The-Sister-Circle-Series-1-by-Vonette-Bright.pdf
    • http://loaminoo.linkpc.net/5098091097090099/Three-Sides-To-Every-Story-by-Robyn-Gant.pdf
    • http://loaminoo.linkpc.net/7097095091098/Love-From-Both-Sides-by-Nick-Spalding.pdf
    • http://loaminoo.linkpc.net/1090093091095092/The-One-Thing-I-Know-B-Sides-1-by-Keelan-Ellis.pdf
    • http://loaminoo.linkpc.net/1096098093091095/Other-Sides-12-Webfiction-Tales-by-A-M-Harte.pdf
    • http://loaminoo.linkpc.net/9091096097094093/A-m-sica-do-uni

Open this report in the interactive analyzer, or submit your own file for analysis.