Malicious PDF — malware analysis report

Static analysis result for SHA-256 7c2bae8c57904543…

MALICIOUS

PDF

16.5 KB Created: 2019-04-30 05:15:09 +01:00 Authoring application: mPDF 5.7
MD5: 2362c7c4d151450281dbcc875fd4d7ca SHA-1: 3c012cd981d1c6d17a4c65a6b5733cc07e0e5ec7 SHA-256: 7c2bae8c57904543343981ba8367f807283293d9edc104e0ef42714ff5a222e2
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded URLs pointing to external PDF files, many of which are hosted on the dynamic DNS domain 'loaminoo.linkpc.net'. This behavior is indicative of a link farm or a method to distribute further malicious content. The ML classifier also flagged this PDF as malicious, supporting the suspicious nature of the embedded links.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3093095097099098/Ten-Beach-Road-Ten-Beach-Road-1-by-Wendy-Wax.pdf
    • http://loaminoo.linkpc.net/4094099093095094/Ten-Beach-Road-Ten-Beach-Road-1-by-Wendy-Wax.pdf
    • http://loaminoo.linkpc.net/3099095091099094/The-House-on-Mermaid-Point-Ten-Beach-Road-3-by-Wendy-Wax.pdf
    • http://loaminoo.linkpc.net/4098095098093/Beach-Road-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/4099093095092097/Beach-Dreams-The-Beach-House-3-by-Trish-Perry.pdf
    • http://loaminoo.linkpc.net/4091091096098092/Summer-Beach-Vets-Playing-Santa-Summer-Beach-Romance-2-5-by-H-Y-Hanna.pdf
    • http://loaminoo.linkpc.net/8093095094095/The-Beach-House-The-Beach-House-1-by-Sally-John.pdf
    • http://loaminoo.linkpc.net/2090093098094099/In-Search-of-Captain-Zero-A-Surfer-s-Road-Trip-beyond-the-End-of-the-Road-by-Allan-C-Weisbecker.pdf
    • http://loaminoo.linkpc.net/4090097090095/In-Search-of-Captain-Zero-A-Surfer-s-Road-Trip-Beyond-the-End-of-the-Road-by-Allan-C-Weisbecker.pdf
    • http://loaminoo.linkpc.net/9097090092094/One-for-the-Road-Road-1-by-Elise-K-Ackers.pdf
    • http://loaminoo.linkpc.net/9099092096093/It-s-a-Mad-Mad-Mad-Mad-Trip-On-the-Road-of-the-Longest-Two-Week-Family-Road-Trip-in-History-by-Kevin-J-Shay.pdf
    • http://loaminoo.linkpc.net/1090095097090096091/Theodor-Herzl-the-Road-to-Israel-The-Road-to-Israel-by-Miriam-Gurko.pdf
    • http://loaminoo.linkpc.net/2099091099090094/Walking-Wolf-Road-The-Wolf-Road-Chronicles-1-by-Brandon-M-Herbert.pdf
    • http://loaminoo.linkpc.net/1096092090099092/Down-a-Lost-Road-The-Lost-Road-Chronicles-1-by-J-Leigh-Bralick.pdf
    • http://loaminoo.linkpc.net/5097093099/The-Broken-Road-The-Broken-Road-1-by-Richard-Paul-Evans.pdf
    • http://loaminoo.linkpc.net/4096091094095098/Demon-Road-Demon-Road-1-by-Derek-Landy.pdf
    • http://loaminoo.linkpc.net/2099099094090092/Nextwave-by-Jay-Beach.pdf
    • http://loaminoo.linkpc.net/4092092099092091/Beach-Tales-by-Uke-Jackson.pdf
    • http://loaminoo.linkpc.net/4098094097091091/Beach-Music-by-Pat-Conroy.pdf
    • http://loaminoo.linkpc.net/4095093097096098/Heart-of-the-Sunset-by-Rex-Beach.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.