Malicious PDF — malware analysis report

Static analysis result for SHA-256 65310aa97c7c585a…

MALICIOUS

PDF

17.9 KB Created: 2019-04-30 04:16:21 +01:00 Authoring application: mPDF 5.7
MD5: b6ff825817960975e28de37692e0d441 SHA-1: 323b02179ee45628c6a9e48a4656e9dcfd9c1c2e SHA-256: 65310aa97c7c585ab60a994efc49c213e233f5261427dfbfd7e8c8572d29d66d
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, pointing to external PDF files. While the content of the DOC BODY is unreadable, the heuristic suggests a malicious intent related to link farming or potentially hosting malicious content. The ML_NYX_PDF_MALICIOUS heuristic further supports the malicious classification. No scripts were extracted, but the presence of embedded URLs and the link farm heuristic indicate a potential for initial access via spearphishing.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6092092096092094/Plays-2-A-Summer-s-Day-Dream-of-Autumn-Winter-by-Jon-Fosse.pdf
    • http://loaminoo.linkpc.net/2090097092098093/The-Autumn-of-Desire-Shelter-from-the-Winter-2-by-D-W-Adler.pdf
    • http://loaminoo.linkpc.net/3091097091099096/Six-Plays-The-Children-s-Hour-Days-to-Come-The-Little-Foxes-Watch-on-the-Rhine-Another-Part-of-the-Forest-The-Autumn-Garden-by-Lillian-Hellman.pdf
    • http://loaminoo.linkpc.net/7097095097092093/Songe-d-Automne-Dream-of-Autumn-piano-by-Archibald-Joyce.pdf
    • http://loaminoo.linkpc.net/1097097092098098/An-Autumn-Dream-Silver-Moon-Saga-1-5-by-Melissa-Giorgio.pdf
    • http://loaminoo.linkpc.net/5092091090092093/Dream-on-Monkey-Mountain-and-Other-Plays-by-Derek-Walcott.pdf
    • http://loaminoo.linkpc.net/1093095096098095/A-Winter-Dream-by-Richard-Paul-Evans.pdf
    • http://loaminoo.linkpc.net/3093098098099098/Summer-Lessons-Winter-Ball-2-by-Amy-Lane.pdf
    • http://loaminoo.linkpc.net/3096095096098094/The-Winter-Oak-Summer-Country-2-by-James-A-Hetley.pdf
    • http://loaminoo.linkpc.net/4092097090090099/The-Last-Best-League-One-Summer-One-Season-One-Dream-by-Jim-Collins.pdf
    • http://loaminoo.linkpc.net/2095099098091090/The-Summer-Marked-The-Winter-People-2-by-Rebekah-L-Purdy.pdf
    • http://loaminoo.linkpc.net/6099092094095090/Winter-Notes-on-Summer-Impressions-by-Fyodor-Dostoyevsky.pdf
    • http://loaminoo.linkpc.net/1099095097091092/The-Summer-Marked-The-Winter-People-2-by-Rebekah-L-Purdy.pdf
    • http://loaminoo.linkpc.net/4096094091099097/Summer-s-Dream-The-Chocolate-Box-Girls-3-by-Cathy-Cassidy.pdf
    • http://loaminoo.linkpc.net/4093097094097091/Brilliant-Dark-Summer-Snow-Winter-Sun-2-by-Heather-Leigh.pdf
    • http://loaminoo.linkpc.net/1093098096096099/Summer-Dreams-Winter-Love-by-Mary-Francis-Shura.pdf
    • http://loaminoo.linkpc.net/1090096098095090094/Calderon-Plays-1-The-Surgeon-of-Honour-Life-is-a-Dream-Three-Judgements-in-One-by-Pedro-Calder-n-de-la-Barca.pdf
    • http://loaminoo.linkpc.net/9095093090096095/The-Shakespeare-Plays-A-Midsummer-Night-s-Dream-by-William-Shakespeare.pdf
    • http://loaminoo.linkpc.net/7098096095097/The-Boys-of-Winter-The-Untold-Story-of-a-Coach-a-Dream-and-the-1980-U-S-Olympic-Hockey-Team-by-Wayne-Coffey.pdf
    • http://loaminoo.linkpc.net/2098096095097/Autumn-in-the-City-of-Angels-Autumn-1-by-Kirby-Howell.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.