Malicious PDF — malware analysis report

Static analysis result for SHA-256 64039d9c9107fcdc…

MALICIOUS

PDF

15.8 KB Created: 2019-04-30 04:50:23 +01:00 Authoring application: mPDF 5.7
MD5: bfea5f5fadb2946be14197bcdd2fcde9 SHA-1: eed68c5d96d640afbc293400a039034eb14c144f SHA-256: 64039d9c9107fcdc5e03df5bf506916c42bed802ae7e79b16102eaf8eaf1a6af
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document was flagged by a machine learning classifier and contains a large number of embedded external links, many of which appear to be SEO-optimized book titles. This suggests a tactic to manipulate search engine results or potentially lure users to malicious content disguised as legitimate resources. The primary attack pattern observed is the creation of a link farm within the document.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9892

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4096092091099090/The-List-A-Week-by-Week-Reckoning-of-Trump-s-First-Year-by-Amy-Siskind.pdf
    • http://loaminoo.linkpc.net/6098093091097096/One-Year-to-an-Organized-Life-From-Your-Closets-to-Your-Finances-the-Week-by-Week-Guide-to-Getting-Completely-Organized-for-Good-by-Regina-Leeds.pdf
    • http://loaminoo.linkpc.net/3099096094096096/Your-Pregnancy-Week-by-Week-by-Glade-B-Curtis.pdf
    • http://loaminoo.linkpc.net/3092092091090099/The-12-Week-Year-by-Brian-P-Moran.pdf
    • http://loaminoo.linkpc.net/1090099098091099097/American-History-amp-Donald-Trump-A-History-Professor-Explores-The-200-Year-Old-Roots-of-the-Trump-Campaign-by-Michael-Rank.pdf
    • http://loaminoo.linkpc.net/3095095094093097/One-Week-by-K-Mason.pdf
    • http://loaminoo.linkpc.net/6090092095098/A-Week-to-Forever-by-Stephanie-Zen.pdf
    • http://loaminoo.linkpc.net/5098094099099092/Wordpress-in-a-week-Or-less-by-Zak-Cagaros.pdf
    • http://loaminoo.linkpc.net/1094097099094099/Four-Week-Fiance-2-by-J-S-Cooper.pdf
    • http://loaminoo.linkpc.net/7094093097093090/A-Week-at-the-Lake-by-Wendy-Wax.pdf
    • http://loaminoo.linkpc.net/5090092095090097/A-Week-of-This-A-Novel-in-Seven-Days-by-Nathan-Whitlock.pdf
    • http://loaminoo.linkpc.net/4097099090096/A-Week-in-Winter-by-Maeve-Binchy.pdf
    • http://loaminoo.linkpc.net/3095095090091091/A-Week-in-the-Snow-by-Gwen-Masters.pdf
    • http://loaminoo.linkpc.net/1099098099095092/A-Week-in-Paris-by-Rachel-Hore.pdf
    • http://loaminoo.linkpc.net/4098090091090090/Cookie-s-Week-by-Cindy-Ward.pdf
    • http://loaminoo.linkpc.net/2091096096093090/The-Three-Week-Arrangement-by-Sarah-Ballance.pdf
    • http://loaminoo.linkpc.net/2098094093091097/A-Week-in-Winter-by-Marcia-Willett.pdf
    • http://loaminoo.linkpc.net/8090092098095092/Festival-Week-Liavek-5-by-Will-Shetterly.pdf
    • http://loaminoo.linkpc.net/3092095096093091/A-Week-in-Winter-by-Maeve-Binchy.pdf
    • http://loaminoo.linkpc.net/6091090092093097/Week-end-en-enfer-by-James-Patterson.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.