Malicious PDF — malware analysis report

Static analysis result for SHA-256 58d64cd3d96133dc…

MALICIOUS

PDF

22.1 KB Created: 2019-05-02 19:24:32 +01:00 Authoring application: mPDF 5.7
MD5: ed3546a63e83b04bdf714cade91a3a97 SHA-1: 176f39bf9ca4e127460e36cb84a0496d47814ec6 SHA-256: 58d64cd3d96133dc982ccaed9e37f023e0ea25690a738248e35a1719f5f12d1f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of external links, indicative of a link farm or SEO manipulation tactic. While no scripts were extracted, the embedded URLs suggest a potential for redirecting users to malicious sites. The ML classifier's high confidence score supports the malicious verdict.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8099095094096095/Das-Liebeskonzil-Eine-Himmels-Trag-die-in-F-nf-Aufz-gen-by-Oskar-Panizza.pdf
    • http://loaminoo.linkpc.net/8099095094096096/S-mtliche-Werke-Aus-dem-Tagebuch-eines-Hundes-Deutsche-Thesen-gegen-den-Papst-und-seine-Dunkelm-nner-Visionen-Das-Liebeskonzil-Genie-und-Wahnsinn-in-Tavistock-Square-by-Oskar-Panizza.pdf
    • http://loaminoo.linkpc.net/9098095091094093/The-Council-of-Love-A-Heavenly-Tragedy-in-Five-Acts-Volume-II-5-by-Oskar-Panizza.pdf
    • http://loaminoo.linkpc.net/1091095094096093092/Der-Illusionismus-und-die-Rettung-der-Pers-nlichkeit-Skizze-einer-Weltanschauung-by-Oskar-Panizza.pdf
    • http://loaminoo.linkpc.net/1091095094096093098/Aus-dem-Tagebuch-eines-Hundes-Das-Verbrechen-in-Tavistock-Square-Vollst-ndige-Ausgabe-by-Oskar-Panizza.pdf
    • http://loaminoo.linkpc.net/1090096099098091092/Kritische-Theorie-Und-Politischer-Eingriff-Oskar-Negt-Zum-65-Geburtstag-by-Oskar-Negt.pdf
    • http://loaminoo.linkpc.net/1090097090094090095/Erl-sung-f-r-deine-Blutlinie-Grundlagen-f-r-Durchbr-che-in-den-Gerichtss-len-des-Himmels-by-H-Sirovina.pdf
    • http://loaminoo.linkpc.net/1091095094095097096/A-History-of-Women-s-Writing-in-Italy-by-Letizia-Panizza.pdf
    • http://loaminoo.linkpc.net/1091095094096092099/Wer-andere-in-die-Grube-schickt-Ein-Mallorca-Krimi-by-Kaspar-Panizza.pdf
    • http://loaminoo.linkpc.net/9095091093099095/Magia-Adamica-Oder-Das-Alterthum-Der-Magie-ALS-Dererselben-Von-Adam-an-Herabwarts-Geleitete-Erweisung-Welcher-Ein-Ganz-Vollkommene-Entdeckung-Des-Wahren-Himmels-Zugefuget-by-Thomas-Vaughan.pdf
    • http://loaminoo.linkpc.net/1091097091096099092/Die-Hochzeitsreise-Lustspiel-in-Zwei-Aufz-gen-by-Roderich-Benedix.pdf
    • http://loaminoo.linkpc.net/1090097093097093096/Maskerade-Schauspiel-in-Vier-Aufz-gen-by-Ludwig-Fulda.pdf
    • http://loaminoo.linkpc.net/1091096094097094091/1913-Schauspiel-in-Drei-Aufz-gen-by-Carl-Sternheim.pdf
    • http://loaminoo.linkpc.net/1091097091096099099/Die-Hochzeitsreise-Lustspiel-in-Zwei-Aufz-gen-by-Roderich-Benedix.pdf
    • http://loaminoo.linkpc.net/1091096094096095098/1913-Schauspiel-in-Drei-Aufz-gen-by-Carl-Sternheim.pdf
    • http://loaminoo.linkpc.net/5092098099095095/Gr-fin-Chateaubriant-Historisches-Trauerspiel-in-F-nf-Aufz-gen-by-Emil-Pirazzi.pdf
    • http://loaminoo.linkpc.net/1091091095099095092/Die-Zigeuner-Ein-Lustspiel-in-5-Aufz-gen-by-Heinrich-Ferdinand-Moller.pdf
    • http://loaminoo.linkpc.net/1090093095093097091/Der-Neffe-ALS-Onkel-Lustspiel-in-Aufz-gen-by-Friedrich-Schiller.pdf
    • http://loaminoo.linkpc.net/6092096097092096/Ritter-Lanval-Lustspiel-in-Drei-Aufz-gen-by-Paul-Ernst.pdf
    • http://loaminoo.linkpc.net/1090091099092094091/Shakespeares-Wandlung-Schauspiel-in-Vier-Aufz-gen-by-Hermann-Horn.pdf
    • http://loaminoo.linkpc.net/1091095094096093098/Aus-dem-Tagebuch-eines-Hundes-Das-Verbreche

Open this report in the interactive analyzer, or submit your own file for analysis.