Malicious PDF — malware analysis report

Static analysis result for SHA-256 64af95aa62eec827…

MALICIOUS

PDF

20.7 KB Created: 2019-04-30 04:16:32 +01:00 Authoring application: mPDF 5.7
MD5: 2313d12b3975a1b92d4da43454230c34 SHA-1: 458e9176b00e2147e2b2b0ab4222bd8f0df2c970 SHA-256: 64af95aa62eec827210eba61d406d8f133e0d4e47c935d26f6b25ae06d13f2ee
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, many of which are hosted on the dynamic DNS domain 'loaminoo.linkpc.net'. This heuristic firing suggests a link farm or a method to distribute further content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9098090092091095/Bernard-Herrmann-Film-Music-And-Narrative-by-Graham-Donald-Bruce.pdf
    • http://loaminoo.linkpc.net/4099098093098093/A-Heart-at-Fire-s-Center-The-Life-and-Music-of-Bernard-Herrmann-by-Steven-C-Smith.pdf
    • http://loaminoo.linkpc.net/6098091099098091/Reel-Music-Exploring-100-Years-of-Film-Music-by-Roger-Hickman.pdf
    • http://loaminoo.linkpc.net/3095099094092095/John-Williams-s-Film-Music-Jaws-Star-Wars-Raiders-of-the-Lost-Ark-and-the-Return-of-the-Classical-Hollywood-Music-Style-by-Emilio-Audissino.pdf
    • http://loaminoo.linkpc.net/4094097093093098/A-History-of-Narrative-Film-by-David-A-Cook.pdf
    • http://loaminoo.linkpc.net/6096098094090093/A-History-of-Narrative-Film-by-David-A-Cook.pdf
    • http://loaminoo.linkpc.net/5098092093098/Romance-Box-Set-Billionaire-Romance-Feel-The-Music-Books-1-3-Music-in-his-Bones-Soul-and-Heart-by-Amerine-Graham.pdf
    • http://loaminoo.linkpc.net/1093099096095098/Story-and-Discourse-Narrative-Structure-in-Fiction-and-Film-by-Seymour-Chatman.pdf
    • http://loaminoo.linkpc.net/6090097092098094/Suture-and-Narrative-Deep-Intersubjectivity-in-Fiction-and-Film-by-George-Butte.pdf
    • http://loaminoo.linkpc.net/2095095096097095/The-Reel-Civil-War-Mythmaking-in-American-Film-by-Bruce-Chadwick.pdf
    • http://loaminoo.linkpc.net/7092090099090094/Nino-Rota-Music-Film-and-Feeling-by-Richard-Dyer.pdf
    • http://loaminoo.linkpc.net/1095096099095/A-Decade-of-Music-by-Bernard-H-Haggin.pdf
    • http://loaminoo.linkpc.net/9094092093091097/A-Hundred-Years-of-Japanese-Film-A-Concise-History-by-Donald-Richie.pdf
    • http://loaminoo.linkpc.net/4099098094094098/Torn-Music-Rejected-Film-Scores-a-Selected-History-by-Gergely-Hubai.pdf
    • http://loaminoo.linkpc.net/5091093097094090/Diligent-River-Daughter-by-Bruce-Graham.pdf
    • http://loaminoo.linkpc.net/1090091095093096/75-Masterpieces-Every-Christian-Should-Know-The-Fascinating-Stories-behind-Great-Works-of-Art-Literature-Music-and-Film-by-Terry-Glaspey.pdf
    • http://loaminoo.linkpc.net/6090096095093/Billionaire-Romance-Music-in-His-soul-by-Amerine-Graham.pdf
    • http://loaminoo.linkpc.net/1096091098095097/Whatever-Happened-to-the-Music-Teacher-How-Government-Decides-and-Why-by-Donald-J-Savoie.pdf
    • http://loaminoo.linkpc.net/9095092093096093/Pauline-Studies-Essays-Presented-To-Professor-F-F-Bruce-On-His-70th-Birthday-by-Donald-Hagner.pdf
    • http://loaminoo.linkpc.net/2093092092097092/Music-Body-and-Desire-in-Medieval-Culture-Hildegard-of-Bingen-to-Chaucer-by-Bruce-Holsinger.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.