Malicious PDF — malware analysis report

Static analysis result for SHA-256 5f40cb9d8108bb98…

MALICIOUS

PDF

14.9 KB Created: 2019-05-02 00:42:50 +01:00 Authoring application: mPDF 5.7
MD5: 81fe87a7884750e57af839ffd4ab3ef0 SHA-1: dd633bafde2dc5976ba1bf9c2b923c812a80edf9 SHA-256: 5f40cb9d8108bb980340fa56b0e32202354f3ae0c52d506668b1ad1770173d07
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external websites, identified by the PDF_SEO_LINK_FARM heuristic. While the URLs themselves are currently marked as benign, the sheer volume and the nature of the heuristic suggest a malicious intent, possibly for SEO manipulation or to redirect users to malicious content. The ML_NYX_PDF_MALICIOUS classifier also flagged this document with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6090091090098/The-Last-Word-The-Spellmans-6-by-Lisa-Lutz.pdf
    • http://loaminoo.linkpc.net/1098096093095099/The-Spellman-Files-The-Spellmans-1-by-Lisa-Lutz.pdf
    • http://loaminoo.linkpc.net/9094092090095093/Heads-Up-No-Limit-Hold-emso-Gewinnen-Sie-Beim-Heads-Up-by-Collin-Moshman.pdf
    • http://loaminoo.linkpc.net/1095099097091099/Severed-A-History-of-Heads-Lost-and-Heads-Found-by-Frances-Larson.pdf
    • http://loaminoo.linkpc.net/4093096097098094/Secrets-of-a-Former-Fat-Girl-How-to-Lose-Two-Four-or-More-Dress-Sizes--And-Find-Yourself-Along-the-Way-by-Lisa-Delaney.pdf
    • http://loaminoo.linkpc.net/7096096099098097/Trail-of-the-Spellmans-Document-5-The-Spellmans-series-by-Lisa-Lutz.pdf
    • http://loaminoo.linkpc.net/2098096096098097/Curse-of-the-Spellmans-The-Spellmans-2-by-Lisa-Lutz.pdf
    • http://loaminoo.linkpc.net/1094090098090099/Counting-Heads-Counting-Heads-1-by-David-Marusek.pdf
    • http://loaminoo.linkpc.net/6093097091099092/Heads-You-Win-A-Novel-by-Jeffrey-Archer.pdf
    • http://loaminoo.linkpc.net/9096096092092090/The-Girl-With-Three-Heads-by-Suz-Korb.pdf
    • http://loaminoo.linkpc.net/8090096097095099/Heads-or-Tails-by-Leslie-A-Gordon.pdf
    • http://loaminoo.linkpc.net/7096091099096/Talking-Heads-by-Alan-Bennett.pdf
    • http://loaminoo.linkpc.net/3090099098092093/Heads-Will-Roll-by-Joanie-Chevalier.pdf
    • http://loaminoo.linkpc.net/6090092097099098/The-5-Heads-of-Humbert-Wolfe-by-A-D-Padgett.pdf
    • http://loaminoo.linkpc.net/2094095094094092/They-Had-Goat-Heads-by-D-Harlan-Wilson.pdf
    • http://loaminoo.linkpc.net/2097097090095098/Heads-Will-Roll-Necromancer-0-1-by-Lish-McBride.pdf
    • http://loaminoo.linkpc.net/3093098091097096/Cyrus-Swamp-Heads-1-by-Esther-E-Schmidt.pdf
    • http://loaminoo.linkpc.net/2092099097096090/All-Heads-Turn-When-the-Hunt-Goes-By-by-John-Farris.pdf
    • http://loaminoo.linkpc.net/9097098093097092/The-Night-of-the-Blue-Heads-by-J-rgen-Banscherus.pdf
    • http://loaminoo.linkpc.net/3098092097093097/In-Over-Their-Heads-Under-Their-Skin-2-by-Margaret-Peterson-Haddix.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.