Malicious PDF — malware analysis report

Static analysis result for SHA-256 6533028b59349526…

MALICIOUS

PDF

18.4 KB Created: 2019-05-02 17:39:21 +01:00 Authoring application: mPDF 5.7
MD5: 4e3f1850e398e7e8731a98d365734658 SHA-1: e47a0fb1f94660295a0c90f9dee8e1b474aa41f8 SHA-256: 6533028b593495263e0922ec050252326c791d59835860ac25d7f4e90d0e0049
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs, identified as a link farm, which is a common tactic for SEO manipulation or distributing malicious content. While no scripts were explicitly extracted, the presence of embedded URLs and the ML classifier's high confidence suggest a malicious intent, likely to redirect users to potentially harmful sites. The heuristic 'PDF_SEO_LINK_FARM' strongly indicates this behavior.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3094098091096095/Laird-Of-Her-Heart-Dundragon-Time-Travel-Trilogy-1-by-Sabrina-York.pdf
    • http://loaminoo.linkpc.net/8091097091093092/The-Time-Machine-The-Original-Time-Travel-Story-A-Short-Science-Fiction-Novel-about-Time-Travel-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/3090090093098092/A-Laird-to-Hold-A-Laird-for-All-Time-5-by-Angeline-Fortin.pdf
    • http://loaminoo.linkpc.net/4094095098099092/The-Big-Book-Of-Time-Travel-Romance-Includes-After-Cilmeri-0-5-Lost-Highlander-1-The-McKinnon-Legends-1-Out-of-Time-1-Time-Walkers-1-by-Sarah-Woodbury.pdf
    • http://loaminoo.linkpc.net/3099099092097095/Whipped-by-Sabrina-York.pdf
    • http://loaminoo.linkpc.net/1097090094099099/Extreme-Couponing-by-Sabrina-York.pdf
    • http://loaminoo.linkpc.net/1091095099098094/Folly-Noble-Passions-5-by-Sabrina-York.pdf
    • http://loaminoo.linkpc.net/4094098095095099/Time-Travel-and-Warp-Drives-A-Scientific-Guide-to-Shortcuts-through-Time-and-Space-by-Allen-Everett.pdf
    • http://loaminoo.linkpc.net/1096098094090098/The-Reluctant-Time-Traveler-Time-Travel-1-by-Lynda-Eymann.pdf
    • http://loaminoo.linkpc.net/5097094091098092/The-Time-Machine-The-Original-Time-Travel-Story-by-H-G-Wells.pdf
    • http://loaminoo.linkpc.net/1093093097093096/The-Mists-of-Time-Da-Vinci-Time-Travel-4-by-Susan-Squires.pdf
    • http://loaminoo.linkpc.net/4093098099093093/Justice-for-all-Time-a-time-travel-romance-by-Kit-Cole.pdf
    • http://loaminoo.linkpc.net/3092091097093097/The-Best-Time-Travel-Stories-of-All-Time-by-Barry-N-Malzberg.pdf
    • http://loaminoo.linkpc.net/1093095094093096/Time-Travel-Adventures-Of-The-1800-Club-Time-Travel-Adventures-of-the-1800-Club-1-by-Robert-McAuley.pdf
    • http://loaminoo.linkpc.net/4092095091091092/Exploring-New-York-City-by-Fodor-39-s-Travel-Publications-Inc-.pdf
    • http://loaminoo.linkpc.net/4090095091099/I-Heart-New-York-I-Heart-1-by-Lindsey-Kelk.pdf
    • http://loaminoo.linkpc.net/5090091098099093/I-Heart-New-York-I-Heart-1-by-Lindsey-Kelk.pdf
    • http://loaminoo.linkpc.net/2094094098099097/Femdom-The-Game-A-Bdsm-Trilogy-Erotika-by-Sabrina-Jen-Mountford.pdf
    • http://loaminoo.linkpc.net/4090098096091097/Carmen-s-New-York-Romance-Trilogy-Carmen-s-New-York-1-3-by-Nikki-Sex.pdf
    • http://loaminoo.linkpc.net/3095095095093/Time-Travel-by-James-Gleick.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.