Malicious PDF — malware analysis report

Static analysis result for SHA-256 6e90863f7a5fa8e8…

MALICIOUS

PDF

17.5 KB Created: 2019-05-01 20:37:53 +01:00 Authoring application: mPDF 5.7
MD5: f693809838021c33bcc05bd7f67a2a34 SHA-1: 9a59711314e9cef5a8fd22b4b4c47a5e6aa0aa6c SHA-256: 6e90863f7a5fa8e87fc1947aa95503c27c275a0e6a2b4edabe336777cc591276
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While the document body is unreadable, the presence of numerous links suggests an attempt to direct users to external resources, potentially for malicious purposes. The ML_NYX_PDF_MALICIOUS classifier also flagged this PDF with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1091099093091095094/Twilight-Midnight-Sun-Edward-s-Version-of-The-Twilight-Saga-A-Parody-by-E-Cullen.pdf
    • http://loaminoo.linkpc.net/3095092097090/The-Twilight-Saga-The-Official-Illustrated-Guide-Twilight-4-5-by-Stephenie-Meyer.pdf
    • http://loaminoo.linkpc.net/4090096091099097/At-Twilight-Born-in-Twilight-Beyond-Twilight-Wings-in-the-Night-4-amp-5-by-Maggie-Shayne.pdf
    • http://loaminoo.linkpc.net/4096094092093093/My-Gay-Sparkly-Vampire-Romance-A-Twilight-Parody-by-Zoe-E-Whitten.pdf
    • http://loaminoo.linkpc.net/2095095094098/Twilight-Fulfilled-Wings-in-the-Night-18-Children-of-Twilight-2-by-Maggie-Shayne.pdf
    • http://loaminoo.linkpc.net/5095092099096/Twilight-Life-and-Death-Twilight-1-1-75-by-Stephenie-Meyer.pdf
    • http://loaminoo.linkpc.net/2098091095094090/Twilight-Life-and-Death-Twilight-1-1-75-by-Stephenie-Meyer.pdf
    • http://loaminoo.linkpc.net/5095099095095097/The-Legend-of-Zelda-Twilight-Princess-Wii-Version----Collector-s-Edition-by-David-Hodgson.pdf
    • http://loaminoo.linkpc.net/5093092093099091/Twilight-Twilight-1-by-Stephenie-Meyer.pdf
    • http://loaminoo.linkpc.net/6090097096090/Twilight-Twilight-1-by-Stephenie-Meyer.pdf
    • http://loaminoo.linkpc.net/3090091090092097/Twilight-Twilight-1-by-Stephenie-Meyer.pdf
    • http://loaminoo.linkpc.net/8095099092095099/Angelfall-Box-Set---Parts-1-to-5-Twilight-at-Dawn-Saga-Book-1-by-Conrad-Powell.pdf
    • http://loaminoo.linkpc.net/7093097095091094/Die-Twilight-Saga-New-Moon---Bis-s-zur-Mittagsstunde-Das-offizielle-Buch-zum-Film-by-Mark-Cotta-Vaz.pdf
    • http://loaminoo.linkpc.net/8095099092096090/Redemption-Part-1-of-Angelfall-Twilight-at-Dawn-Saga-Book-1-by-Conrad-Powell.pdf
    • http://loaminoo.linkpc.net/8095099092095095/Celebration-Part-6-of-Angelfall-Twilight-at-Dawn-Saga-Book-1-by-Conrad-Powell.pdf
    • http://loaminoo.linkpc.net/2092098098092090/Breaking-Yawn-The-Second-Book-in-the-Twishite-Saga-A-Parody-Twishite-Saga-2-by-Stephfordy-Mayo.pdf
    • http://loaminoo.linkpc.net/2094091099096090/The-Twilight-Swimmer-by-A-C-Kavich.pdf
    • http://loaminoo.linkpc.net/4099099092093091/Twilight-of-the-Assholes-by-Tim-Kreider.pdf
    • http://loaminoo.linkpc.net/5091091093091/Because-of-Twilight-by-Adele-Bradford.pdf
    • http://loaminoo.linkpc.net/4094099094097097/Twilight-In-Delhi-by-Ahmed-Ali.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.