Malicious PDF — malware analysis report

Static analysis result for SHA-256 67652486f83dfdfe…

MALICIOUS

PDF

15.3 KB Created: 2019-05-02 19:03:45 +01:00 Authoring application: mPDF 5.7
MD5: d730c16f7a266fbcc8f33965b66709bc SHA-1: 17f4c048d67b67d740d9aafb1b8442bb6f02d5c0 SHA-256: 67652486f83dfdfe9b603fbc646814c32d8dd11124a4c29c1a7c29120d3c9ae0
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF document contains a large number of embedded URLs, forming a link farm. These URLs point to external PDF files that appear to be book downloads, suggesting a lure to drive traffic to malicious or compromised sites. The ML classifier also flagged this PDF as malicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9880

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090091092094097095/Fashion-The-Whole-Story-by-Marnie-Fogg.pdf
    • http://loaminoo.linkpc.net/1090091092095094091/Vintage-Fashion-Knitwear-Collecting-and-Wearing-Designer-Classics-by-Marnie-Fogg.pdf
    • http://loaminoo.linkpc.net/1090091092094098091/Missing-A-True-Story-Of-A-Childhood-Lost-by-Marnie-Grundman.pdf
    • http://loaminoo.linkpc.net/1091096096097094099/Fashion-Zeitgeist-Trends-and-Cycles-in-the-Fashion-System-by-Barbara-Vinken.pdf
    • http://loaminoo.linkpc.net/4093092094094094/Crimes-of-Fashion-Three-Women-One-Fashion-Empire-Six-Claws-by-Jonathan-Soroff.pdf
    • http://loaminoo.linkpc.net/1090093097093091098/50s-Fashion-Vintage-Fashion-and-Beauty-Ads-by-Jim-Heimann.pdf
    • http://loaminoo.linkpc.net/8092093099092093/Confessions-of-an-autistic-and-sexually-confused-international-model-The-true-story-of-a-fashion-carreer-by-Agata-Y-M-F-Decroix.pdf
    • http://loaminoo.linkpc.net/2090096090095/Soliloquy-by-Janet-Fogg.pdf
    • http://loaminoo.linkpc.net/4094094092091093/Gryphon-House-by-Ashley-Fogg.pdf
    • http://loaminoo.linkpc.net/6099091094098090/Lucius-Fogg-Deadly-Creatures-by-Dan-Wickline.pdf
    • http://loaminoo.linkpc.net/6096098098099090/Beyond-Trans-Does-Gender-Matter-by-Heath-Fogg-Davis.pdf
    • http://loaminoo.linkpc.net/1090091092094095099/The-Cover-Up-by-Marnie-Riches.pdf
    • http://loaminoo.linkpc.net/1090091092094097096/Wine-A-Tasting-Course-by-Marnie-Old.pdf
    • http://loaminoo.linkpc.net/1090091092094097097/In-the-Sounds-and-Seas-by-Marnie-Galloway.pdf
    • http://loaminoo.linkpc.net/1090091092094096090/A-Matter-of-Marnie-by-Rosemary-Badger.pdf
    • http://loaminoo.linkpc.net/1090091092095094095/Marnie-s-Wedding-by-Craig-Robins.pdf
    • http://loaminoo.linkpc.net/1090091092094095091/Marnie-s-Tale-by-Erzabet-Bishop.pdf
    • http://loaminoo.linkpc.net/1090091092095093093/In-the-Sounds-and-Seas-Volume-I-by-Marnie-Galloway.pdf
    • http://loaminoo.linkpc.net/4090095092093096/No-Other-Darkness-DI-Marnie-Rome-2-by-Sarah-Hilary.pdf
    • http://loaminoo.linkpc.net/1090091092093097097/Deadhead-The-Marnie-Baranuik-Files-3-1-by-A-J-Aalto.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.