Malicious PDF — malware analysis report

Static analysis result for SHA-256 57529910942af065…

MALICIOUS

PDF

13.7 KB Created: 2019-04-30 01:55:44 +01:00 Authoring application: mPDF 5.7
MD5: 11d20e542e5dcf7272f597595f7f1d31 SHA-1: 78d50a0d967f3b907a7c88daeb21787ca09f7ff5 SHA-256: 57529910942af0657e8aad579adeb554d1296f1dd45b18dd874c30a8e022ff50
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged the document as malicious. While the document body is unreadable, the structure and heuristics indicate a likely attempt to manipulate search engine results or distribute content via a link farm, potentially leading to malicious sites.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9102

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3095095094096096/The-Sea-the-Sea-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/3091092091099096/Under-the-Net-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/4091090093090095/Under-the-Net-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/5090091096099090/The-Bell-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/4097098093097/The-Bell-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/5090093096095095/The-Bell-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/1092096093095092/An-Unofficial-Rose-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/7099092091097/The-Philosopher-s-Pupil-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/3097091090094/The-Nice-and-the-Good-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/3092093097095093/Bruno-s-Dream-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/1093097098094096/Henry-and-Cato-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/8099092097094/Nuns-and-Soldiers-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/1090095099098090099/Iris-Murdoch-for-Beginners-by-Bran-Nicol.pdf
    • http://loaminoo.linkpc.net/8098099095090092/The-Bell-Avon-Paperback-1966-by-Iris-Murdoch.pdf
    • http://loaminoo.linkpc.net/4097090091098095/Imagining-Characters-Six-Conversations-About-Women-Writers-Jane-Austen-Charlotte-Bronte-George-Eliot-Willa-Cather-Iris-Murdoch-and-Toni-Morrison-by-A-S-Byatt.pdf
    • http://loaminoo.linkpc.net/2099099097094098/The-Lion-the-Dragon-and-Their-Unicorn-Omega-The-Unicorn-Omegas-2-by-Lorelei-M-Hart.pdf
    • http://loaminoo.linkpc.net/3092095095092/The-Last-Unicorn-The-Last-Unicorn-1-by-Peter-S-Beagle.pdf
    • http://loaminoo.linkpc.net/2094094092097090/Bad-Unicorn-Bad-Unicorn-1-by-Platte-F-Clark.pdf
    • http://loaminoo.linkpc.net/8094093095094095/Iris-Has-Free-Time-by-Iris-Smyles.pdf
    • http://loaminoo.linkpc.net/4096093092098099/Red-Unicorn-Unicorn-3-by-Tanith-Lee.pdf
    • http://loaminoo.linkpc.net/8098099

Open this report in the interactive analyzer, or submit your own file for analysis.