Malicious PDF — malware analysis report

Static analysis result for SHA-256 74dcf18ba55fda1e…

MALICIOUS

PDF

18.8 KB Created: 2019-04-30 02:50:51 +01:00 Authoring application: mPDF 5.7
MD5: de507e3b19e58826dd629d5c1e9e8b37 SHA-1: 50c60a5ff6dcdf7e72d661584709c7bd39b5c70f SHA-256: 74dcf18ba55fda1e3b6cf032cf30be8c4a4ed3226e1c4649cec0993bfa0ed9fb
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links, identified as a link farm, likely intended to manipulate search engine results or distribute further malicious content. While the specific URLs themselves are marked as benign, the heuristic firing indicates a malicious intent to use the PDF for link distribution. No scripts were extracted, but the PDF structure itself is suspicious.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4095096099095099/Crime-Boss-Baby-A-Billionaire-Mafia-Love-Story-Bad-Boys-and-Babies-Book-3-by-Krista-Lakes.pdf
    • http://loaminoo.linkpc.net/4098099098097096/A-Baby-For-My-Billionaire-Boss-1-by-Annie-Young.pdf
    • http://loaminoo.linkpc.net/4094090098090096/The-Billionaire-Love-Match-The-Billionaire-Surprise-Book-1-by-Emma-St-Clair.pdf
    • http://loaminoo.linkpc.net/2092097091/Yours-Completely-Billionaires-and-Brides-1-by-Krista-Lakes.pdf
    • http://loaminoo.linkpc.net/1096093097094/Scoreboard-Baby-A-Story-of-College-Football-Crime-and-Complicity-by-Ken-Armstrong.pdf
    • http://loaminoo.linkpc.net/4096092092095097/The-Lady-of-the-Lakes-The-True-Love-Story-of-Sir-Walter-Scott-Historical-Proper-Romance-2-by-Josi-S-Kilpack.pdf
    • http://loaminoo.linkpc.net/3092097096095094/How-To-Kill-Your-Boss---An-Erotic-Love-Story-by-Krissy-Daniels.pdf
    • http://loaminoo.linkpc.net/1091091098/One-Night-with-a-Billionaire-Billionaire-Boys-Club-6-by-Jessica-Clare.pdf
    • http://loaminoo.linkpc.net/9090096097095/The-Wrong-Billionaire-s-Bed-Billionaire-Boys-Club-3-by-Jessica-Clare.pdf
    • http://loaminoo.linkpc.net/1094097093099098/Romancing-the-Billionaire-Billionaire-Boys-Club-5-by-Jessica-Clare.pdf
    • http://loaminoo.linkpc.net/2099093094091095/Billionaire-Boys-Club-Billionaire-Boys-Club-1-by-Simone-Holloway.pdf
    • http://loaminoo.linkpc.net/2091092091096091/The-Billionaire-Bachelor-Billionaire-Bad-Boys-1-by-Jessica-Lemmon.pdf
    • http://loaminoo.linkpc.net/3096094095093095/I-Love-Baby-Animals---Fun-Children-s-Picture-Book-with-Amazing-Photos-of-Baby-Animals-by-David-Chuka.pdf
    • http://loaminoo.linkpc.net/7096093093096093/Loving-My-Miami-Boss-3-Hassan-amp-Nazariah-s-Love-Story-by-Miss-Jenesequa.pdf
    • http://loaminoo.linkpc.net/6093099097097093/Billionaire-s-Jet-Set-Babies-by-Catherine-Mann.pdf
    • http://loaminoo.linkpc.net/2098091099092091/The-Billionaire-s-Passion-The-Billionaire-s-Kiss-Book-Four-A-Billionaire-Alpha-Romance-by-Olivia-Thorne.pdf
    • http://loaminoo.linkpc.net/3090095094/Tapping-the-Billionaire-Billionaire-Bad-Boys-1-by-Max-Monroe.pdf
    • http://loaminoo.linkpc.net/9090090099098097/The-Volkovs-A-Billionaire-Bad-Boy-Mafia-Romance-Box-Set-by-Ava-Bloom.pdf
    • http://loaminoo.linkpc.net/2099099096090091/Trust-Fund-Baby-Frat-Boys-Baby-1-by-Aiden-Bates.pdf
    • http://loaminoo.linkpc.net/3099095095097090/Barefoot-Kisses-The-Kisses-Series-7-by-Krista-Lakes.pdf