Malicious PDF — malware analysis report

Static analysis result for SHA-256 7a8df82504fee868…

MALICIOUS

PDF

20.6 KB Created: 2019-05-02 06:51:53 +01:00 Authoring application: mPDF 5.7
MD5: e55b178455d0051c882f5802d49be7be SHA-1: 727890ba477c19a118575ff438a6510dd12e8667 SHA-256: 7a8df82504fee868cd89dd3ad019dad472e441f6e60f328e79206751ab6f60db
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic, pointing to various book titles. While the URLs themselves are marked as benign, the sheer volume and structure suggest a malicious intent, possibly for SEO poisoning or to distribute further malicious content. The ML_NYX_PDF_MALICIOUS classifier strongly supports a malicious verdict. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9922

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4094090098090096/The-Billionaire-Love-Match-The-Billionaire-Surprise-Book-1-by-Emma-St-Clair.pdf
    • http://loaminoo.linkpc.net/2098091099092091/The-Billionaire-s-Passion-The-Billionaire-s-Kiss-Book-Four-A-Billionaire-Alpha-Romance-by-Olivia-Thorne.pdf
    • http://loaminoo.linkpc.net/4097094091/The-Billionaire-s-Christmas-Virgin-Prelude-to-Billionaire-Unknown---Blake-The-Billionaire-s-Obsession-9-5-by-J-S-Scott.pdf
    • http://loaminoo.linkpc.net/4094090093096093/The-Billionaire-s-Stray-Heart-Burke-Billionaire-Romance-Book-2-by-Rachelle-J-Christensen.pdf
    • http://loaminoo.linkpc.net/4094093095090092/The-Billionaire-s-Desire-A-Single-Dad-Romance-The-Billionaire-s-Touch-Book-4-by-L-N-Pearl.pdf
    • http://loaminoo.linkpc.net/4094090096098098/The-Brazen-Billionaire-Clean-Billionaire-Beach-Club-Romance-Book-4-by-Elana-Johnson.pdf
    • http://loaminoo.linkpc.net/4094090096098094/The-Billionaire-s-Bodyguard-Clean-Billionaire-Beach-Club-Romance-Book-5-by-Elana-Johnson.pdf
    • http://loaminoo.linkpc.net/4094090097099096/The-Bashful-Billionaire-Clean-Billionaire-Beach-Club-Romance-Book-3-by-Elana-Johnson.pdf
    • http://loaminoo.linkpc.net/4094090096099093/Mending-Images-with-the-Billionaire-A-Clean-Billionaire-Romance-Artists-amp-Billionaires-Book-4-by-Lorin-Grace.pdf
    • http://loaminoo.linkpc.net/2093092090093091/Goldie-s-Billionaire-Bear-Shifter-Fairy-Tale-Goldilocks-and-the-Billionaire-Bear-Book-2-by-Ella-Jasmine.pdf
    • http://loaminoo.linkpc.net/6098098094090096/Writhe-Desperate-for-the-Biker-Billionaire-Billionaire-Biker-series-Book-4-by-Kenzie-Haven.pdf
    • http://loaminoo.linkpc.net/6098098094090095/Release-Pleasures-of-the-Biker-Billionaire-Billionaire-Biker-series-Book-5-by-Kenzie-Haven.pdf
    • http://loaminoo.linkpc.net/1097097096096092/Submit-Taken-by-the-Biker-Billionaire-Billionaire-Biker-series-Book-1-by-Kenzie-Haven.pdf
    • http://loaminoo.linkpc.net/1094097092091099/Billionaire-Romance-Billionaire-A-Sizzling-Hot-Billionaire-Romance-Boxed-Set-Collection-by-J-L-Ryan.pdf
    • http://loaminoo.linkpc.net/9098092091097097/Flirting-with-the-Billionaire-Margo-Flirting-with-the-Billionaire-Book-4-by-Tracy-Court.pdf
    • http://loaminoo.linkpc.net/2095091099091090/Lexie-s-First-Time-Borrowed-Billionaire-0-5-Billionaire-Novelist-0-5-by-Mimi-Strong.pdf
    • http://loaminoo.linkpc.net/3092094099096091/The-Billionaire-Wins-the-Game-Billionaire-Bachelors-1-by-Melody-Anne.pdf
    • http://loaminoo.linkpc.net/1094094094095090/The-Billionaire-Wins-the-Game-Billionaire-Bachelors-1-by-Melody-Anne.pdf
    • http://loaminoo.linkpc.net/1094097093099098/Romancing-the-Billionaire-Billionaire-Boys-Club-5-by-Jessica-Clare.pdf
    • http://loaminoo.linkpc.net/2097093099090098/The-Reclusive-Billionaire-Destination-Billionaire-Romance-1-by-Lucy-McConnell.pdf
    • http://loaminoo.linkpc.net/4094090096098094/The-Billionaire-s-Bodyguard-Clean-Billionaire-Beach-Club-Romance-Bo

Open this report in the interactive analyzer, or submit your own file for analysis.