Malicious PDF — malware analysis report

Static analysis result for SHA-256 5ad096cfcb511c4e…

MALICIOUS

PDF

14.3 KB Created: 2019-05-07 03:36:09 +01:00 Authoring application: mPDF 5.7
MD5: f237b2135eb307b69e1b8095412e7a00 SHA-1: 61d35639f3a5bf57dbf29f7112c938e24b5c74f1 SHA-256: 5ad096cfcb511c4e62d1d73e3bf9affd1b3cf8715e571d5e0933aed61f110433
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic, which suggests a link farm or redirection tactic. The ML_NYX_PDF_MALICIOUS classifier also flagged the file with high confidence. The embedded URLs, such as http://loaminoo.linkpc.net/2098090096099097/Black-Moon-Silver-Moon-2-by-Rebecca-A-Rogers.pdf, are likely used to direct users to malicious content or phishing sites.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2098090096099097/Black-Moon-Silver-Moon-2-by-Rebecca-A-Rogers.pdf
    • http://loaminoo.linkpc.net/1092097096096092/Black-Moon-Silver-Moon-2-by-Rebecca-A-Rogers.pdf
    • http://loaminoo.linkpc.net/1097093098092094/Blood-Moon-Silver-Moon-3-by-Rebecca-A-Rogers.pdf
    • http://loaminoo.linkpc.net/4092097093095092/Silver-Moon-The-Complete-Saga-by-Rebecca-A-Rogers.pdf
    • http://loaminoo.linkpc.net/1090099093099099091/Silver-Moon-Moon-Trilogy-Part-III-by-C-L-Bevill.pdf
    • http://loaminoo.linkpc.net/2092098092093092/Dragon-Moon-Moon-9-by-Rebecca-York.pdf
    • http://loaminoo.linkpc.net/7091095096094/Black-Moon-Black-Moon-Saga-Book-1-by-F-M-Sherrill.pdf
    • http://loaminoo.linkpc.net/9096099094090/The-Whole-of-the-Moon-by-Brian-Rogers.pdf
    • http://loaminoo.linkpc.net/5090094094097092/Silver-Moon-by-T-L-Mitchell.pdf
    • http://loaminoo.linkpc.net/1090099092/Between-Us-and-the-Moon-by-Rebecca-Maizel.pdf
    • http://loaminoo.linkpc.net/3090090098098098/Blood-Moon-Moonstruck-1-by-Silver-James.pdf
    • http://loaminoo.linkpc.net/2091092094090098/The-Moon-in-the-Morning-by-Rebecca-Nebesar.pdf
    • http://loaminoo.linkpc.net/2095098098091/Silver-Birch-Blood-Moon-by-Ellen-Datlow.pdf
    • http://loaminoo.linkpc.net/1097097092098098/An-Autumn-Dream-Silver-Moon-Saga-1-5-by-Melissa-Giorgio.pdf
    • http://loaminoo.linkpc.net/1092095095092090/The-Shadow-Stealer-Silver-Moon-Saga-3-by-Melissa-Giorgio.pdf
    • http://loaminoo.linkpc.net/4094091093091096/The-Sight-Seer-Silver-Moon-Saga-1-by-Melissa-Giorgio.pdf
    • http://loaminoo.linkpc.net/7094092090091092/Greyson---The-Complete-Serial-Parts-1---4-The-Silver-Moon-Pack-0-by-Cali-MacKay.pdf
    • http://loaminoo.linkpc.net/9096092091092099/Moon-O-Theism-Religion-of-a-War-and-Moon-God-Prophet-Volume-I-of-II-by-Yoel-Natan.pdf
    • http://loaminoo.linkpc.net/1093095093098095/Blood-Moon-Harvest-Seasons-of-the-Moon-Cain-Chronicles-2-by-S-M-Reine.pdf
    • http://loaminoo.linkpc.net/3098097096092096/In-the-Light-of-the-Full-Cold-Moon-Moon-Sage-Theosophies-1-by-Susan-Elizabeth-Girard.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.