Malicious PDF — malware analysis report

Static analysis result for SHA-256 676c18ac2ac971b9…

MALICIOUS

PDF

14.6 KB Created: 2019-04-30 03:50:08 +01:00 Authoring application: mPDF 5.7
MD5: 625ca721856542afa625afde72d0113e SHA-1: 1022efd961b2f7f58e85d61d64ece7d2e8632f63 SHA-256: 676c18ac2ac971b9a152efdd4d40d6138f9359eed56391c81e88258fcb1b1b4a
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs that point to book titles, suggesting a link farm or SEO manipulation tactic. The ML classifier also flagged this PDF as malicious. While the URLs themselves are marked as benign, the sheer volume and structure indicate a malicious intent to direct users to external content, potentially for further exploitation or to generate traffic.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3095096093095/1st-to-Die-Women-s-Murder-Club-1-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/3093096094091095/The-Women-s-Murder-Club-Set-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/3095097098090094/3rd-Degree-Women-s-Murder-Club-3-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/1090098098094/The-8th-Confession-Women-s-Murder-Club-8-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/4097098094091099/The-9th-Judgment-Women-s-Murder-Club-9-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/1090095091090/The-9th-Judgment-Women-s-Murder-Club-9-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/4096092092098097/The-17th-Suspect-Women-s-Murder-Club-17-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/4097098096098091/10th-Anniversary-Women-s-Murder-Club-10-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/2097092094095092/10th-Anniversary-Women-s-Murder-Club-10-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/8099095091092/A-Women-s-Murder-Club-Omnibus-4th-of-July-The-5th-Horseman-The-6th-Target-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/1090093094095099096/The-Midnight-Club-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/3090092094090095/The-Murder-of-King-Tut-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/5098093096/Murder-Games-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/3092094098099095/The-Murder-House-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/4094091096090090/Confessions-of-a-Murder-Suspect-Confessions-1-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/1092099095094096/Confessions-of-a-Murder-Suspect-Confessions-1-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/1098096098097099/Now-You-See-Her-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/2096096092094092/Cradle-and-All-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/4094095098093097/The-Big-Bad-Wolf-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/3098097094097096/The-Shut-In-by-James-Patterson.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.