Malicious PDF — malware analysis report

Static analysis result for SHA-256 5e058d3599f67e75…

MALICIOUS

PDF

26.6 KB Created: 2019-04-30 18:40:18 +01:00 Authoring application: mPDF 5.7
MD5: a1e9345a24d4a78cd6ddc9100198ac19 SHA-1: bc006b0b33e41864251381050b5ee929c9bfbdfc SHA-256: 5e058d3599f67e759ae651a7dd094ddc7d1640dc4469abf5ef07127140912705
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified as a link farm, which is a common technique for SEO poisoning or distributing malicious content. While the specific URLs extracted were labeled as benign, the heuristic firing indicates a pattern of generating numerous external links. The ML classifier strongly suggests maliciousness, and the embedded URLs likely serve as a lure to redirect users to potentially harmful sites.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/5090094093099095/Samantha-Watkins-Chronicles-of-an-Extraordinary-Ordinary-Life-1-by-Aur-lie-Venem.pdf
    • http://loaminoo.linkpc.net/5091094091090095/Ordinary-Man-Extraordinary-Mission-The-Life-and-Work-of-E-Stanley-Jones-by-Stephen-A-Graham.pdf
    • http://loaminoo.linkpc.net/8099096095097093/The-Guardian-of-Mercy-How-an-Extraordinary-Painting-by-Caravaggio-Changed-an-Ordinary-Life-Today-by-Terence-Ward.pdf
    • http://loaminoo.linkpc.net/3096093099095099/Shaped-Notes-How-Ordinary-People-with-Extraordinary-Gifts-Influenced-My-Life-and-Career-by-Larnelle-Harris.pdf
    • http://loaminoo.linkpc.net/1093092094091099/The-Return-of-Meteor-Boy-The-Extraordinary-Adventures-of-Ordinary-Boy-2-by-William-Boniface.pdf
    • http://loaminoo.linkpc.net/4094097096095098/Global-An-Extraordinary-Guide-for-Ordinary-Heroes-by-Lyla-Bashan.pdf
    • http://loaminoo.linkpc.net/1093092096091095/The-Hero-Revealed-The-Extraordinary-Adventures-of-Ordinary-Boy-1-by-William-Boniface.pdf
    • http://loaminoo.linkpc.net/1094090099092090/Making-Rounds-with-Oscar-The-Extraordinary-Gift-of-an-Ordinary-Cat-by-David-Dosa.pdf
    • http://loaminoo.linkpc.net/1097098099099098/Significant-Objects-100-Extraordinary-Stories-About-Ordinary-Things-by-Joshua-Glenn.pdf
    • http://loaminoo.linkpc.net/1090092093093096/The-Starbucks-Experience-5-Principles-for-Turning-Ordinary-Into-Extraordinary-by-Joseph-A-Michelli.pdf
    • http://loaminoo.linkpc.net/2099092092096095/Mystical-Interludes-An-Ordinary-Person-s-Extraordinary-Experiences-by-Emily-Rodavich.pdf
    • http://loaminoo.linkpc.net/4092099090094091/Elijah-A-Man-Like-Us-How-an-Ordinary-Person-Can-Make-an-Extraordinary-Difference-by-David-Roper.pdf
    • http://loaminoo.linkpc.net/6097095098097090/The-Israelis-Ordinary-People-in-an-Extraordinary-Land-Updated-in-2008-by-Donna-Rosenthal.pdf
    • http://loaminoo.linkpc.net/4091093097099091/The-American-Dream-Revisited-Ordinary-People-Extraordinary-Results-by-Gary-Sirak.pdf
    • http://loaminoo.linkpc.net/3090096094093097/Gold-in-the-Water-The-True-Story-of-Ordinary-Men-and-Their-Extraordinary-Dream-of-Olympic-Glory-by-P-H-Mullen-Jr-.pdf
    • http://loaminoo.linkpc.net/6099092099092094/Wisdom-Inc-30-Business-Virtues-That-Turn-Ordinary-People-into-Extraordinary-Leaders-by-Seth-Godin.pdf
    • http://loaminoo.linkpc.net/8098099097/Joyful-The-Surprising-Power-of-Ordinary-Things-to-Create-Extraordinary-Happiness-by-Ingrid-Fetell-Lee.pdf
    • http://loaminoo.linkpc.net/2098091096099099/50-Children-One-Ordinary-American-Couple-s-Extraordinary-Rescue-Mission-into-the-Heart-of-Nazi-Germany-by-Steven-Pressman.pdf
    • http://loaminoo.linkpc.net/1091097090093096096/Using-The-Sissy-Next-Door-Christina-s-feminization-part-2-Sissy-Christina-Book-3-by-Melinda-Streng.pdf
    • http://loaminoo.linkpc.net/2098091093092095/The-Elephant-in-the-Playroom-Ordinary-Parents-Write-Intimately-and-Honestly-about-the-Extraordinary-Highs-and-Heartbreaking-Lows-of-Raising-Kids-with-Special-Needs-by-Denise-Brodey.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.