Malicious PDF — malware analysis report

Static analysis result for SHA-256 616698381acf4178…

MALICIOUS

PDF

20.2 KB Created: 2019-04-30 03:43:38 +01:00 Authoring application: mPDF 5.7
MD5: 8b01f613e313d32403418c4fcd944772 SHA-1: 6deb4b58b95623ffdfc1cce91f8cffc3a03c4aef SHA-256: 616698381acf417841fd2386dc459f77abfbfc8943deb2517ed97b2c39c02cb9
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, forming a link farm that directs users to external PDF documents. The ML classifier strongly indicated maliciousness, and the heuristic identified this as a critical PDF SEO link farm. The primary goal appears to be directing users to a large collection of external documents, likely as a distribution or redirection mechanism.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4094098095095099/Time-Travel-and-Warp-Drives-A-Scientific-Guide-to-Shortcuts-through-Time-and-Space-by-Allen-Everett.pdf
    • http://loaminoo.linkpc.net/8091097091093092/The-Time-Machine-The-Original-Time-Travel-Story-A-Short-Science-Fiction-Novel-about-Time-Travel-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/1093095094093096/Time-Travel-Adventures-Of-The-1800-Club-Time-Travel-Adventures-of-the-1800-Club-1-by-Robert-McAuley.pdf
    • http://loaminoo.linkpc.net/1090090099091093093/Stach-s-Textbook-of-coal-petrology-With-39-tables-in-text-by-Erich-Stach.pdf
    • http://loaminoo.linkpc.net/1090090099093095095/The-Andromeda-Galaxy-and-Beyond-by-Robert-W-Stach.pdf
    • http://loaminoo.linkpc.net/4094095098099092/The-Big-Book-Of-Time-Travel-Romance-Includes-After-Cilmeri-0-5-Lost-Highlander-1-The-McKinnon-Legends-1-Out-of-Time-1-Time-Walkers-1-by-Sarah-Woodbury.pdf
    • http://loaminoo.linkpc.net/1091093090091097096/The-Space-Book-From-the-Beginning-to-the-End-of-Time-250-Milestones-in-the-History-of-Space-Astronomy-by-Jim-Bell.pdf
    • http://loaminoo.linkpc.net/2094097091096/The-Art-of-Space-Travel-by-Nina-Allan.pdf
    • http://loaminoo.linkpc.net/5097094091098092/The-Time-Machine-The-Original-Time-Travel-Story-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/1096098094090098/The-Reluctant-Time-Traveler-Time-Travel-1-by-Lynda-Eymann.pdf
    • http://loaminoo.linkpc.net/1093093097093096/The-Mists-of-Time-Da-Vinci-Time-Travel-4-by-Susan-Squires.pdf
    • http://loaminoo.linkpc.net/4093098099093093/Justice-for-all-Time-a-time-travel-romance-by-Kit-Cole.pdf
    • http://loaminoo.linkpc.net/3092091097093097/The-Best-Time-Travel-Stories-of-All-Time-by-Barry-N-Malzberg.pdf
    • http://loaminoo.linkpc.net/3096090097098091/The-History-of-American-Aviation-and-Space-Travel-by-Richard-S-Hartmetz.pdf
    • http://loaminoo.linkpc.net/9093094097/Out-There-A-Scientific-Guide-to-Alien-Life-Antimatter-and-Human-Space-Travel-by-Michael-Wall.pdf
    • http://loaminoo.linkpc.net/3095095095093/Time-Travel-by-James-Gleick.pdf
    • http://loaminoo.linkpc.net/1090095098093098091/Once-Upon-a-Time-Travel-by-Dinah-Katt.pdf
    • http://loaminoo.linkpc.net/2098098097094/OMG-Oh-My-God-CUL8R-Time-Travel-Mystery-1-by-Bob-Kat.pdf
    • http://loaminoo.linkpc.net/2095098091092097/The-Time-Travel-Chronicles-by-Crystal-Watanabe.pdf
    • http://loaminoo.linkpc.net/1094093096092092/The-Man-Who-Made-Time-Travel-by-Kathryn-Lasky.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.