Malicious PDF — malware analysis report

Static analysis result for SHA-256 7e15550042b5e7e6…

MALICIOUS

PDF

18.5 KB Created: 2019-05-01 20:05:55 +01:00 Authoring application: mPDF 5.7
MD5: f758ecd03c006ca568e632b7ac1f34fe SHA-1: 82a2716c316dca91ff484d133b88830317946721 SHA-256: 7e15550042b5e7e616911fab31ebe6a190efbdbbe80d160c9c98512dca8304ce
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF was flagged by a machine learning classifier and contains a large number of embedded external links, a technique often used for SEO manipulation or to distribute further malicious content. The links point to various PDF files hosted on the same domain, suggesting a coordinated effort to create a link farm. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/8090094091094/The-Odd-Couple-by-Neil-Simon.pdf
    • http://loaminoo.linkpc.net/4097094094092097/Last-of-the-Red-Hot-Lovers-by-Neil-Simon.pdf
    • http://loaminoo.linkpc.net/4092093090097097/Barefoot-In-The-Park-by-Neil-Simon.pdf
    • http://loaminoo.linkpc.net/7096097097098099/Anansi-Boys-BBC-Dramatisation-by-Neil-Gaiman.pdf
    • http://loaminoo.linkpc.net/4093099092097096/The-Star-Spangled-Girl-by-Neil-Simon.pdf
    • http://loaminoo.linkpc.net/3091095093098097/Nerd-Do-Well-A-Small-Boys-Journey-to-Becoming-a-Big-Kid-by-Simon-Pegg.pdf
    • http://loaminoo.linkpc.net/2099094098/The-Awakening-of-Sunshine-Girl-The-Haunting-of-Sunshine-Girl-2-by-Paige-McKenzie.pdf
    • http://loaminoo.linkpc.net/4095096/The-Haunting-of-Sunshine-Girl-The-Haunting-of-Sunshine-Girl-1-by-Paige-McKenzie.pdf
    • http://loaminoo.linkpc.net/1091099091098098096/Real-Boys-Boys-Will-Do-Boys-6-by-Nica-Berry.pdf
    • http://loaminoo.linkpc.net/6099093090099098/Boys-Will-Be-Boys-Breaking-the-Link-Between-Masculinity-and-Violence-by-Myriam-Miedzian.pdf
    • http://loaminoo.linkpc.net/1099092091097096/The-Way-of-Boys-Raising-Healthy-Boys-in-a-Challenging-and-Complex-World-by-Anthony-Rao.pdf
    • http://loaminoo.linkpc.net/1094090097097091/Boys-Will-Be-Boys-The-Glory-Days-and-Party-Nights-of-the-Dallas-Cowboys-Dynasty-by-Jeff-Pearlman.pdf
    • http://loaminoo.linkpc.net/2096097099091090/Boys-Adrift-The-Five-Factors-Driving-the-Growing-Epidemic-of-Unmotivated-Boys-and-Underachieving-Young-Men-by-Leonard-Sax.pdf
    • http://loaminoo.linkpc.net/3099099096091091/Raising-Boys-Why-Boys-Are-Different-and-How-to-Help-Them-Become-Happy-and-Well-Balanced-Men-by-Steve-Biddulph.pdf
    • http://loaminoo.linkpc.net/6097096098091095/The-Boys-Tomo-1-El-nombre-del-juego-The-Boys-1-by-Garth-Ennis.pdf
    • http://loaminoo.linkpc.net/1092090097092/Who-Needs-Boys-The-Girlfriend-s-Guide-to-Boys-3-by-Stephie-Davis.pdf
    • http://loaminoo.linkpc.net/1099092098090090/Game-Boys-Boys-in-Love-1-by-Rochelle-H-Ragnarok.pdf
    • http://loaminoo.linkpc.net/2090096091098092/The-Bad-Boys-Reluctant-Woman-The-Law-Castle-Bad-Boys-2-by-Sam-Crescent.pdf
    • http://loaminoo.linkpc.net/7097098097090094/Shreveport-and-Bossier-City-Photographs-and-Text-by-Neil-Johnson-With-a-Foreword-by-Jim-Montgomery-by-Neil-Johnson.pdf
    • http://loaminoo.linkpc.net/4096099097092094/Real-Boys-Kiss-Boys-by-Joe-Filippone.pdf
    • http://loaminoo.linkpc.net/4095096/The-Haunting-of-Sunshine-Girl-The-Haunting-of-Sunshine-Girl-1-by-Paige-McKenzi

Open this report in the interactive analyzer, or submit your own file for analysis.