Malicious PDF — malware analysis report

Static analysis result for SHA-256 6bd6071f86d76416…

MALICIOUS

PDF

20.6 KB Created: 2019-05-01 13:06:09 +01:00 Authoring application: mPDF 5.7
MD5: 6dbec6460ad73d2ebbc968367653093f SHA-1: 727eb089a3a692d4e3d618d2d8e5da9fc1b85f5e SHA-256: 6bd6071f86d764161cd2c10c7e34236d320a37df1ffa91184611c2b296a29203
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF file contains a large number of embedded URLs, as indicated by the PDF_SEO_LINK_FARM heuristic. These URLs point to adult-themed content and are likely intended to drive traffic to those sites. The ML_NYX_PDF_MALICIOUS heuristic also flagged the document as malicious. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9904

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9094096094090099/Die-Sexspiele-der-Reichen---Geld-macht-geil-5-scharfe-Erotikgeschichten-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/1090093096094092091/Weihnachtsgeschenk-anal-Scharfe-Erotikstory-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/1090093096094091097/Anale-Lust-Scharfe-Erotikstory-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/1090098092099096091/Sex-mit-dem-Nachbarssohn-Scharfe-MILF-nimmt-sich-was-sie-braucht-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/9094092091090099/Die-neue-Magd---von-der-Hausherrin-verf-hrt-Scharfe-Erotikstory-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/9099091095090091/Anonym-anal---im-Pornokino-entjungfert-Scharfe-Erotikgeschichte-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/1091090090098090092/Mistst-ck-Daf-r-verf-hr-ich-deinen-Freund-Scharfe-Erotikstory-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/1091094090092096099/Vernascht-von-den-Freunden-meines-Sohnes-Scharfe-MILF-treibt-es-wild-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/9095093097093090/Fickt-mich-Er-hat-mich-betrogen-Scharfe-Erotikgeschichte-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/9095091090092091/Verkauft-an-den-Lord-Erotik-im-Barockzeitalter-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/1090091098097098098/Im-Swingerclub-vom-Chef-erwischt-Geile-Erotikgeschichte-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/8096091094097098/Durchgenagelt---die-Praktikantin-Eine-erotische-Kurzgeschichte-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/1091098090090097098/Anw-ltin-in-Ketten-Versaute-BDSM-Story-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/1091092094096097092/Eine-MILF-zur-Bescherung-Geile-Erotikgeschichte-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/1090092097091099095/Wir-Erben-Was-Geld-mit-Menschen-macht-by-Julia-Friedrichs.pdf
    • http://loaminoo.linkpc.net/1090096097099097099/Zum-Dreier-verf-hrt-Hei-e-Dreier-Erotik-by-Bernadette-Binkowski.pdf
    • http://loaminoo.linkpc.net/1090093096093094095/Scharfe-Seitenspr-nge-Fremdgehen-stressfrei-ausleben-28-Scharfe-Quickie-Storys-by-Anonymous.pdf
    • http://loaminoo.linkpc.net/8099097094095098/Online-Geld-verdienen-ab-dem-ersten-Tag-Deine-Blaupause-f-r-ein-erfolgreiches-Online-Business-das-sofort-Geld-erwirtschaftet-und-niemals-schl-ft-Just-be-free-3-by-Corey-Landis.pdf
    • http://loaminoo.linkpc.net/8099098093097097/Geld-sparen-im-Haushalt---Wie-du-auch-mit-Kindern-durch-simple-Tricks-t-glich-Geld-sparen-kannst-Der-Ratgeber-f-r-Familien-um-am-Ende-des-Monats-mehr-auf-dem-Konto-zu-haben-by-Frauke-Fussel.pdf
    • http://loaminoo.linkpc.net/1091091097092096090/Schwule-Erotikgeschichten-by-Andreas-Devaux.pdf