Malicious PDF — malware analysis report

Static analysis result for SHA-256 71982beae65a203a…

MALICIOUS

PDF

21.9 KB Created: 2019-05-02 01:51:59 +01:00 Authoring application: mPDF 5.7
MD5: 0eeedc041db322cb2bb33c55ad98f839 SHA-1: 82364a7cd27ec7089872561234688d7812ad35b2 SHA-256: 71982beae65a203af1386064d9c6bc2c7569f17e3dccf1b923695cc2241084ff
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, masquerading as book titles. This behavior is indicative of a link farm or a traffic-driving scheme, potentially used to distribute further malicious content or to obscure the true malicious intent. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2097091099090097/The-Challenge-of-Jesus-Rediscovering-Who-Jesus-Was-and-Is-by-N-T-Wright.pdf
    • http://loaminoo.linkpc.net/4092094091095098/If-the-Church-Were-Christian-Rediscovering-the-Values-of-Jesus-by-Philip-Gulley.pdf
    • http://loaminoo.linkpc.net/1099094092097095/The-Challenge-of-Jesus-Parables-by-Richard-N-Longenecker.pdf
    • http://loaminoo.linkpc.net/4092093090093090/Jesus-the-Man-Decoding-the-Real-Story-of-Jesus-and-Mary-Magdalene-by-Barbara-Thiering.pdf
    • http://loaminoo.linkpc.net/1098099099098092/Sitting-at-the-Feet-of-Rabbi-Jesus-How-the-Jewishness-of-Jesus-Can-Transform-Your-Faith-by-Ann-Spangler.pdf
    • http://loaminoo.linkpc.net/9099099097092095/Jesus-Firsthand-Daily-Devotional-Meditations-for-Knowing-Jesus-by-David-Feddes.pdf
    • http://loaminoo.linkpc.net/1090098095094090094/A-Year-with-Jesus-Daily-Readings-and-Reflections-on-Jesus-Own-Words-by-R-P-Nettelhorst.pdf
    • http://loaminoo.linkpc.net/4092098096092095/Who-Is-Jesus-Answers-to-Your-Questions-About-the-Historical-Jesus-by-John-Dominic-Crossan.pdf
    • http://loaminoo.linkpc.net/1094094091099091/The-Jesus-Way-A-Conversation-on-the-Ways-That-Jesus-Is-the-Way-Spiritual-Theology-3-by-Eugene-H-Peterson.pdf
    • http://loaminoo.linkpc.net/3096097090097093/What-Would-Jesus-Really-Do-The-Power-amp-Limits-of-Jesus-Moral-Teachings-by-Andrew-Fiala.pdf
    • http://loaminoo.linkpc.net/1090097097093095090/Jesus-the-Liberator-A-Historical-Theological-Reading-of-Jesus-of-Nazareth-by-Jon-Sobrino.pdf
    • http://loaminoo.linkpc.net/1090095097090095093/The-Jesus-Mystery-Astonishing-Clues-to-the-True-Identities-of-Jesus-and-Paul-by-Lena-Einhorn.pdf
    • http://loaminoo.linkpc.net/2097090094092095/Searching-for-Jesus-New-Discoveries-in-the-Quest-for-Jesus-of-Nazareth-and-How-They-Confirm-the-Gospel-Accounts-by-Robert-J-Hutchinson.pdf
    • http://loaminoo.linkpc.net/4092094091097099/The-Jesus-Legend-A-Case-for-the-Historical-Reliability-of-the-Synoptic-Jesus-Tradition-by-Paul-Rhodes-Eddy.pdf
    • http://loaminoo.linkpc.net/3096097098096099/Following-Jesus-Biblical-Reflections-on-Discipleship-by-N-T-Wright.pdf
    • http://loaminoo.linkpc.net/2097091092099098/How-God-Became-Jesus-The-Real-Origins-of-Belief-in-Jesus-Divine-Nature-A-Response-To-Bart-Ehrman-by-Michael-F-Bird.pdf
    • http://loaminoo.linkpc.net/6091094098091094/El-Verdadero-Jesus-True-One-Jesus-by-Neyland-Bayon.pdf
    • http://loaminoo.linkpc.net/5096092096090093/J-sus-Fils-de-l-Homme-J-sus-the-Son-of-Man-by-Kahlil-Gibran.pdf
    • http://loaminoo.linkpc.net/1094090090098091/Jesus-and-the-Victory-of-God-Christian-Origins-and-the-Question-of-God-2-by-N-T-Wright.pdf
    • http://loaminoo.linkpc.net/6097096098096096/Biblia-para-ni-os-Historias-de-Jes-s-The-Jesus-Storybook-Bible-Cada-historia-susurra-su-nombre-by-Sally-Lloyd-Jones.pdf