Malicious PDF — malware analysis report

Static analysis result for SHA-256 5764cd56011c342d…

MALICIOUS

PDF

27.8 KB Created: 2019-04-30 03:42:50 +01:00 Authoring application: mPDF 5.7
MD5: dd17e603e2a729864550f5eb77b15ae3 SHA-1: 8eb900f25eecbc20368a693343bb34921db734c4 SHA-256: 5764cd56011c342d08e4be3174e8289dd6d5ab0c10884319972b6721dac51f9f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While many of these links resolve to benign content, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or to distribute further malicious content. The ML classifier also strongly indicated maliciousness. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091094097094094094/Celebrating-Your-New-Jewish-Daughter-Creating-Jewish-Ways-to-Welcome-Baby-Girls-Into-the-Covenant-by-Debra-Nussbaum-Cohen.pdf
    • http://loaminoo.linkpc.net/1091091093091096098/The-Jewish-Press---A-Gevalt-from-the-Torah-True-An-Examination-of-the-Concepts-Holocaust-and-Israel-in-the-American-Jewish-Newspaper-the-Jewish-Press-by-Sahra-L-Lindeberg.pdf
    • http://loaminoo.linkpc.net/1091097094093095092/Judaism-Everything-You-Need-to-Know-About-Jewish-Religion-Jewish-Culture-and-the-Process-of-Conversion-by-Rachel-Zahl.pdf
    • http://loaminoo.linkpc.net/1090096096092097098/Why-Jews-Do-What-They-Do-The-History-Of-Jewish-Customs-Throughout-The-Cycle-Of-The-Jewish-Year-by-Daniel-Sperber.pdf
    • http://loaminoo.linkpc.net/5094099091092092/Suddenly-Jewish-Jews-Raised-as-Gentiles-Discover-Their-Jewish-Roots-by-Barbara-Kessel.pdf
    • http://loaminoo.linkpc.net/5090096093090092/Jewish-Enlightenment-in-an-English-Key-Anglo-Jewry-s-Construction-of-Modern-Jewish-Thought-by-David-B-Ruderman.pdf
    • http://loaminoo.linkpc.net/8099098098092091/The-Rise-and-Fall-of-Jewish-Nationalism-Jewish-and-Christian-Ethnicity-in-Ancient-Palestine-by-Doron-Mendels.pdf
    • http://loaminoo.linkpc.net/1090096096092097096/The-Jewish-Life-Cycle-Lore-and-Iconography-Jewish-Customs-from-the-Cradle-to-the-Grave-by-Daniel-Sperber.pdf
    • http://loaminoo.linkpc.net/1091092094099094094/Jewish-and-Non-Jewish-Spaces-in-Urban-Context-by-Alina-Gromova.pdf
    • http://loaminoo.linkpc.net/6093090091096090/Pere-Marie-Benoit-and-Jewish-Rescue-How-a-French-Priest-Together-with-Jewish-Friends-Saved-Thousands-During-the-Holocaust-by-Susan-Zuccotti.pdf
    • http://loaminoo.linkpc.net/5090098090098090/Hitler-s-Jewish-Soldiers-The-Untold-Story-of-Nazi-Racial-Laws-and-Men-of-Jewish-Descent-in-the-German-Military-by-Bryan-Mark-Rigg.pdf
    • http://loaminoo.linkpc.net/9098096091096096/Israel-is-Real-An-Obsessive-Quest-to-Understand-the-Jewish-Nation-and-Its-History-by-Rich-Cohen.pdf
    • http://loaminoo.linkpc.net/1092094099090090/The-Jewish-Daughter-Diaries-by-Rachel-Ament.pdf
    • http://loaminoo.linkpc.net/8096096096091093/Jewish-Traditions-in-Early-Christian-Literature-Volume-5-the-Didache-Its-Jewish-Sources-and-Its-Place-in-Early-Judaism-and-Christianity-by-Botho-Walldorf.pdf
    • http://loaminoo.linkpc.net/7093091096092091/Answering-Jewish-Objections-to-Jesus-Traditional-Jewish-Objections-Vol-5-by-Michael-L-Brown.pdf
    • http://loaminoo.linkpc.net/7093091096096093/Answering-Jewish-Objections-to-Jesus-Vol-5-Traditional-Jewish-Objections-by-Michael-Brown.pdf
    • http://loaminoo.linkpc.net/8090099093097092/Nice-Jewish-Girls-Growing-Up-in-America-by-Marlene-Adler-Marks.pdf
    • http://loaminoo.linkpc.net/8099099097095095/Greek-in-Jewish-Palestine-Hellenism-in-Jewish-Palestine-by-Saul-Lieberman.pdf
    • http://loaminoo.linkpc.net/5092099091094091/The-New-Jewish-Baby-Book-Names-Ceremonies-amp-Customs-A-Guide-for-Today-s-Families-by-Anita-Diamant.pdf
    • http://loaminoo.linkpc.net/4098097092094090/The-Black-Book-The-Nazi-Crime-Against-The-Jewish-People-by-Jewish-Black-Book-Committee.pdf
    • http://loaminoo.linkpc.net/1091097094093095092/Judaism-Everything-You-Need-to-Know-About-Jewish-Religion-Jewish-Culture-and-the-Process-of-C

Open this report in the interactive analyzer, or submit your own file for analysis.