Malicious PDF — malware analysis report

Static analysis result for SHA-256 77b81f05bfa0dbb4…

MALICIOUS

PDF

19.9 KB Created: 2019-04-30 02:42:58 +01:00 Authoring application: mPDF 5.7
MD5: cd51523d9dd9598f33b5cb847bfff6dc SHA-1: 8d28857819d5b1980196be3363c83a1554c4554d SHA-256: 77b81f05bfa0dbb4acf6cfaaaccc35dd927e25b8fad2fa3950ab8cc130105b4f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links pointing to external PDF files hosted on the loaminoo.linkpc.net domain. This heuristic firing indicates a link farm designed to distribute content, likely as a lure. The ML classifier also flagged this PDF as malicious with high confidence. No scripts were extracted, and the document body was heavily obfuscated, preventing a deeper analysis of the specific lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9922

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4095099093093096/The-Seashell-Anthology-of-Great-Poetry-by-Christopher-Burns.pdf
    • http://loaminoo.linkpc.net/4091093091097091/The-Great-Modern-Poets-An-Anthology-of-the-Best-Poets-and-Poetry-Since-1900-by-Michael-Schmidt.pdf
    • http://loaminoo.linkpc.net/1098093092097/No-Sign-of-Ceasefire-An-Anthology-of-Contemporary-Israeli-Poetry-An-Anthology-of-Contemporary-Israeli-Poetry-by-Warren-Bargad.pdf
    • http://loaminoo.linkpc.net/9092095093093093/My-poetry-depicts-you-An-anthology-of-contemporary-Kurdish-poetry-by-Rebwar-Fatah.pdf
    • http://loaminoo.linkpc.net/4090091096092098/Poetry-Changes-Lives-Daily-Thoughts-on-Poetry-and-History-by-Christopher-Burn.pdf
    • http://loaminoo.linkpc.net/4099095095095090/A-Boom-in-the-Room-an-Anthology-of-Student-Poetry-Student-Poetry-Anthologies-Book-1-by-Annie-Douglass-Lima.pdf
    • http://loaminoo.linkpc.net/1093099093091091/Burns-the-Radical-Poetry-and-Politics-in-Late-Eighteenth-Century-Scotland-by-Liam-McIlvanney.pdf
    • http://loaminoo.linkpc.net/4095099092095097/An-Anthology-of-Modern-Irish-Poetry-by-Wes-Davis.pdf
    • http://loaminoo.linkpc.net/6093091095095/An-Anthology-of-New-Zealand-Poetry-in-English-by-Jenny-Bornholdt.pdf
    • http://loaminoo.linkpc.net/4093090090096097/Poetry-After-9-11-An-Anthology-of-New-York-Poets-by-Dennis-Loy-Johnson.pdf
    • http://loaminoo.linkpc.net/8090090092095094/Confucius-to-Cummings-An-Anthology-of-Poetry-by-Ezra-Pound.pdf
    • http://loaminoo.linkpc.net/2096095090095096/Classical-Chinese-Poetry-An-Anthology-by-David-Hinton.pdf
    • http://loaminoo.linkpc.net/1090096098099096099/An-Anthology-of-German-Poetry-from-Holderlin-to-Rilke-by-ngel-Flores.pdf
    • http://loaminoo.linkpc.net/4095099098099094/The-Ring-Of-Words-An-Anthology-Of-Poetry-For-Children-by-Roger-McGough.pdf
    • http://loaminoo.linkpc.net/1093098097092091/From-the-Country-of-Eight-Islands-An-Anthology-of-Japanese-Poetry-by-Hiroaki-Sato.pdf
    • http://loaminoo.linkpc.net/2097091096097094/My-Cruel-Invention-A-Contemporary-Poetry-Anthology-by-Bernadette-Geyer.pdf
    • http://loaminoo.linkpc.net/6090095094091094/Modern-Arabic-Poetry-An-Anthology-by-Salma-Khadra-Jayyusi.pdf
    • http://loaminoo.linkpc.net/4099091096098092/The-Oxford-Anthology-of-English-Poetry-Vol-2-Blake-to-Heaney-by-John-Wain.pdf
    • http://loaminoo.linkpc.net/4091093091098091/Turning-a-Train-of-Thought-Upside-Down-An-Anthology-of-Women-s-Poetry-by-Andrena-Zawinski.pdf
    • http://loaminoo.linkpc.net/3095090090092/Practicing-Angels-A-Contemporary-Anthology-of-San-Francisco-Bay-Area-Poetry-by-Michael-Mayo.pdf
    • http://loaminoo.linkpc.net/4099095095095090/A-Boom-in-the-Room-an-Anthology-of-S

Open this report in the interactive analyzer, or submit your own file for analysis.