Malicious PDF — malware analysis report

Static analysis result for SHA-256 7e9b0904f88ca185…

MALICIOUS

PDF

20.0 KB Created: 2019-04-30 09:04:13 +01:00 Authoring application: mPDF 5.7
MD5: e1fc875fd41e9a2b101ba1230925fe9a SHA-1: f5a54639c1c0fb9c1d4c121a9e2138373cdce2ae SHA-256: 7e9b0904f88ca1853885f2ff8d0759175dd45d38bc86e710bfafa1f0fb60cb65
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links pointing to external PDF documents hosted on the domain 'loaminoo.linkpc.net'. This behavior is indicative of a link farm or a phishing lure designed to direct users to potentially malicious content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9922

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo
    • http://loaminoo.linkpc.net/1091092094092093098/Summary-amp-Study-Guide-Telegraph-Avenue-by-Michael-Chabon-by-BookRags.pdf
    • http://loaminoo.linkpc.net/6099097098091097/Dear-Russell-Dear-Jourdain-A-Commentary-on-Russell-s-Logic-Based-on-His-Correspondence-with-Philip-Jourdain-by-Ivor-Grattan-Guinness.pdf
    • http://loaminoo.linkpc.net/1092092098096093/Beginners-Guide-On-PHP-Programming-Quick-And-Easy-Guide-To-Learn-PHP-With-My-SQL-by-James-P-Long.pdf
    • http://loaminoo.linkpc.net/8096099092095099/Bridge-A-Reference-Guide-by-Sachen.pdf
    • http://loaminoo.linkpc.net/2097090091092099/Praying-the-Names-of-God-A-Daily-Guide-by-Ann-Spangler.pdf
    • http://loaminoo.linkpc.net/1091097093095097095/Praying-the-Names-of-Jesus-A-Daily-Guide-by-Ann-Spangler.pdf
    • http://loaminoo.linkpc.net/3096093090097096/Awakening-A-Daily-Guide-to-Conscious-Living-by-Shakti-Gawain.pdf
    • http://loaminoo.linkpc.net/2096095094096090/My-Daily-Book-of-Mormon-Devotional---365-Day-Personal-Study-Guide-by-Layne-Packer.pdf
    • http://loaminoo.linkpc.net/4090093093097095/Old-London-Bridge-The-Story-of-the-Longest-Inhabited-Bridge-in-Europe-by-Patricia-Pierce.pdf
    • http://loaminoo.linkpc.net/9098090091094091/The-Great-Bridge-The-Epic-Story-of-the-Building-of-the-Brooklyn-Bridge-by-David-McCullough.pdf
    • http://loaminoo.linkpc.net/3099093092096/The-Great-Bridge-The-Epic-Story-of-the-Building-of-the-Brooklyn-Bridge-by-David-McCullough.pdf
    • http://loaminoo.linkpc.net/2097092093093095/From-Faith-To-Faith-A-Daily-Guide-To-Victory-by-Kenneth-Copeland.pdf
    • http://loaminoo.linkpc.net/1098091094091/Musichound-Lounge-The-Essential-Album-Guide-to-Martini-Music-and-Easy-Listening-by-Steve-Knopper.pdf
    • http://loaminoo.linkpc.net/1091098092096091090/Everyday-Faith-Volume-1-31-Daily-Devotions-from-the-Book-of-Jude-Daily-Devotions-and-Bible-Study-by-John-Stange.pdf
    • http://loaminoo.linkpc.net/1091096093096094095/The-Nordic-Guide-to-Living-10-Years-Longer-10-Easy-Tips-For-a-Happier-Healthier-Life-by-Bertil-Marklund.pdf
    • http://loaminoo.linkpc.net/4091093093098/Telegraph-Days-by-Larry-McMurtry.pdf
    • http://loaminoo.linkpc.net/2099099094096/Telegraph-Avenue-by-Michael-Chabon.pdf
    • http://loaminoo.linkpc.net/3091091091091090/The-Rest-Of-The-Best-And-More-From-The-Best-Of-Bridge-Series-Vol-2-by-Best-of-Bridge.pdf
    • http://loaminoo.linkpc.net/5098099096090091/Your-Annotated-Illustrated-College-Survival-Guide-by-Patrick-Rothfuss.pdf
    • http://loaminoo.linkpc.net/3096099092096096/The-Moccasin-Telegraph-And-Other-Indian-Tales-by-W-P-Kinsella.pdf