Malicious PDF — malware analysis report

Static analysis result for SHA-256 779bf3e860b9c465…

MALICIOUS

PDF

19.0 KB Created: 2019-04-30 02:38:53 +01:00 Authoring application: mPDF 5.7 First seen: 2021-10-14
MD5: 4b98c8426210a0d09f2b0bf1e95dd0d6 SHA-1: 7e9817135956e3956fa80d318d42f50fc56c0991 SHA-256: 779bf3e860b9c4653bf6028a4fe323fff867ff4796496560a8e25ae73e511e11
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, pointing to external resources. While the URLs themselves are currently flagged as benign, the sheer volume and the ML classifier's high confidence score suggest a malicious intent, likely to direct users to a compromised or malicious site. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9912

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8091098094096092/Death-on-Base-The-Fort-Hood-Massacre-by-Anita-Belles-Porterfield.pdf In PDF document text
    • http://loaminoo.linkpc.net/2095096097099096/An-Unerring-Fire-The-Massacre-at-Fort-Pillow-by-Richard-L-Fuchs.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7096091095097090/Dolores-at-Fort-Hood-Tijuana-and-Detroit-by-John-Jellinek.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6092099097090099/Massacre-The-Life-and-Death-of-the-Paris-Commune-by-John-Merriman.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3098094090090094/Massacre-The-Life-and-Death-of-the-Paris-Commune-of-1871-by-John-M-Merriman.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7093097097/The-Belles-The-Belles-1-by-Dhonielle-Clayton.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6093092097091099/Fort-Duquesne-and-Fort-Pitt-by-Daughters-of-the-American-Revolution.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6093092097092091/Fort-Duquesne-and-Fort-Pitt-by-Of-the-American-Revolution-Pennsylvania.pdfIn PDF document text
    • http://loaminoo.linkpc.net/6093093091093092/Bourland-in-North-Texas-and-Indian-Territory-During-the-Civil-War-Fort-Cobb-Fort-Arbuckle-amp-the-Wichita-Mountains-Volume-II-Appendix-by-Patricia-Adkins-Rochette.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7098092092090099/Aventures-Fort-Boyard-6-Une-mygale-s-est-chapp-e-Fort-Boyard-F-by-Dan-Mitrecey.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5096094092090090/1972-in-Israel-Munich-Massacre-Lod-Airport-Massacre-Abu-Daoud-David-Mark-Berger-Sabena-Flight-571-Israel-at-the-1972-Summer-Olympics-by-Source-Wikipedia.pdfIn PDF document text
    • http://loaminoo.linkpc.net/5091090095098097/John-Bell-Hood-The-Rise-Fall-and-Resurrection-of-a-Confederate-General-by-Stephen-Hood.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8095093091092/Rowan-Hood-Outlaw-Girl-of-Sherwood-Forest-Rowan-Hood-1-by-Nancy-Springer.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4092091091094090/The-Twistedly-True-Tale-of-Ruby-Hood-Ruby-Hood-1-by-Stephanie-Greenhalgh.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7094094093092099/Endocrine-Physiology-Mosby-Physiology-Monograph-Series-by-Susan-P-Porterfield.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9092092095096094/Greta-und-der-missgl-ckte-Zauberwunsch-Eine-Geschichte-mit-Illustrationen-von-Anita-Heiden-by-Anita-Heiden.pdfIn PDF document text
    • http://loaminoo.linkpc.net/7098099094096097/Laurell-K-Hamilton-s-Anita-Blake-Vampire-Hunter---The-First-Death-1-by-Laurell-K-Hamilton.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3096098092096092/Sister-Belles-by-Annie-Jones.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1092094097098091/Belles-on-Their-Toes-by-Frank-B-Gilbreth-Jr-.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1091093090096093/Diving-Belles-by-Lucy-Wood.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.