Malicious PDF — malware analysis report

Static analysis result for SHA-256 58776d9d77ac9bd3…

MALICIOUS

PDF

17.1 KB Created: 2019-04-30 08:58:57 +01:00 Authoring application: mPDF 5.7
MD5: 28efb61c38ee3b7fe43d566b07065ac8 SHA-1: 180dd3ee796467ec1329978a9d5eefcf31e68436 SHA-256: 58776d9d77ac9bd3c654f4a4ec8cb9f12b961196c11746d93195dde10c86b790
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While the specific URLs extracted were labeled as benign, the sheer volume and structure suggest a malicious intent, likely for SEO manipulation or to distribute further malicious content. The ML classifier also flagged this PDF with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9788

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4097097093094091/Dungeon-Lord-Otherworldly-Powers-The-Wraith-s-Haunt-2-by-Hugo-Huesca.pdf
    • http://loaminoo.linkpc.net/5097090095090093/The-dark-Lord-Dungeon-Monstres-2-by-Joann-Sfar.pdf
    • http://loaminoo.linkpc.net/4097097092095095/Rune-Universe-Rune-Universe-1-by-Hugo-Huesca.pdf
    • http://loaminoo.linkpc.net/1096092097099091/Dungeon-Madness-The-Divine-Dungeon-2-by-Dakota-Krout.pdf
    • http://loaminoo.linkpc.net/9097099093092093/-5-Dungeon-Meshi-5-Delicious-in-Dungeon-5-by-Ryoko-Kui.pdf
    • http://loaminoo.linkpc.net/9097099093091099/-4-Dungeon-Meshi-4-Delicious-in-Dungeon-4-by-Ryoko-Kui.pdf
    • http://loaminoo.linkpc.net/9097099093091094/-1-Dungeon-Meshi-1-Delicious-in-Dungeon-1-by-Ryoko-Kui.pdf
    • http://loaminoo.linkpc.net/1099092099095096/The-Eternal-Dungeon-Eternal-Dungeon-1-4-amp-side-novella-by-Dusk-Peterson.pdf
    • http://loaminoo.linkpc.net/8094092093099099/UNLEASHING-THE-BESTIAL-POWERS-OF-HORSERADISH-Discover-Exactly-How-To-Releash-The-Extraordinary-Powers-Of-This-Remarkable-Root-The-Kitchen-Cupboard-Series-by-Isabelle-Wilcox.pdf
    • http://loaminoo.linkpc.net/2099094093093091/Otherworldly-Protocol-1-by-Jami-Montgomery.pdf
    • http://loaminoo.linkpc.net/8092095098094/Your-Planet-or-Mine-Otherworldly-Men-1-by-Susan-Grant.pdf
    • http://loaminoo.linkpc.net/7095097095099097/Hugo-s-Works-The-Man-Who-Laughs-Part-2-and-Claude-Gueux-by-Victor-Hugo.pdf
    • http://loaminoo.linkpc.net/4099092099093097/Darkest-Powers-Bonus-Pack-1-Darkest-Powers-Trilogy-0-6-1-5-2-5-by-Kelley-Armstrong.pdf
    • http://loaminoo.linkpc.net/8098099092099090/Victor-Hugo---Die-Elenden-Les-Mis-rables-Gesamtausgabe-Band-1-bis-5-in-ungek-rzter-deutscher-Fassung-by-Victor-Hugo.pdf
    • http://loaminoo.linkpc.net/7095097096090093/The-Works-of-Victor-Hugo-Hans-of-Iceland-Bug-Jargal-Claude-Gueux-by-Victor-Hugo.pdf
    • http://loaminoo.linkpc.net/5094098096099093/The-Works-of-Victor-Hugo-The-Hunchback-of-Notre-Dame-and-Les-Miserables-by-Victor-Hugo.pdf
    • http://loaminoo.linkpc.net/1091096096096099096/The-Haunt-by-J-N-Williamson.pdf
    • http://loaminoo.linkpc.net/1097095099091092/Haunt-Me-by-Liz-Kessler.pdf
    • http://loaminoo.linkpc.net/2094095094093096/Haunt-by-Laura-Lee-Bahr.pdf
    • http://loaminoo.linkpc.net/3091095093094097/Haunt-by-Amber-Delaine.pdf
    • http://loaminoo.linkpc.net/8094092093099099/UNLEASHING-THE-BESTIAL-POWERS-OF-HORSERADISH-Discover-Exactly-How-

Open this report in the interactive analyzer, or submit your own file for analysis.