Malicious PDF — malware analysis report

Static analysis result for SHA-256 81245fddb189b8cb…

MALICIOUS

PDF

17.2 KB Created: 2019-04-30 20:30:24 +01:00 Authoring application: mPDF 5.7
MD5: cfcedac2a8762ffb1149c7715e71308e SHA-1: dd363805ac75c02edc29df0554a0f168e31b1104 SHA-256: 81245fddb189b8cb092f5932fc483da021bac004758a2f98456b78b6bbafcec5
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Phishing: Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. These links point to various book titles hosted on the 'loaminoo.linkpc.net' domain. While the individual links are currently marked as benign, the sheer volume and structure suggest a malicious intent, possibly for SEO manipulation or to distribute further payloads. The ML classifier also strongly indicated maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4091099098095/Twisted-Twisted-Fairy-Tales-1-by-Jenny-Phillips.pdf
    • http://loaminoo.linkpc.net/9096092090097099/Twisted-Tales-for-Twisted-Minds-by-Alisha-Adkins.pdf
    • http://loaminoo.linkpc.net/4099095094091096/The-Wannabe-Author-by-Mary-Papas.pdf
    • http://loaminoo.linkpc.net/3093096096090098/Enthrall-Him-Enthrall-3-by-Vanessa-Fewings.pdf
    • http://loaminoo.linkpc.net/4094094098094094/Twisted-Tales-Six-Fairy-Tales-Turned-Inside-Out-by-Richard-Tulloch.pdf
    • http://loaminoo.linkpc.net/8090091092097094/El-Pagano-and-Other-Twisted-Tales-by-R-D-Armstrong.pdf
    • http://loaminoo.linkpc.net/2090093092091093/Terribly-Twisted-Tales-by-Martin-H-Greenberg.pdf
    • http://loaminoo.linkpc.net/6097099090098095/The-Catacombs-Tales-of-the-Bizarre-and-Twisted-by-Raven-Black.pdf
    • http://loaminoo.linkpc.net/4092092097092091/Twisted-Tales-Flash-Fiction-with-a-Twist-by-Iain-Pattison.pdf
    • http://loaminoo.linkpc.net/3090098096095099/Once-A-Collection-of-Sinfully-Sexy-and-Twisted-Tales-by-Nicole-Hite.pdf
    • http://loaminoo.linkpc.net/6091097090099093/Twisted-Boulevard-Tales-of-Urban-Fantasy-by-Angela-Charmaine-Craig.pdf
    • http://loaminoo.linkpc.net/3099093095092094/WANNA-TAKE-A-RIDE-4-Twisted-Tales-From-The-Files-Of-The-Second-Chance-Limousine-Service-by-Gary-Val-Tenuta.pdf
    • http://loaminoo.linkpc.net/1097091093095096/The-Claiming-of-Rapunzel-in-Xanadu-Twisted-Fairy-Tales-for-the-Sexually-Adventurous-2-by-Bella-Swann.pdf
    • http://loaminoo.linkpc.net/1099098095096097/The-Claiming-of-Sleeping-Beauty-Twisted-Fairy-Tales-for-the-Sexually-Adventurous-3-by-Bella-Swann.pdf
    • http://loaminoo.linkpc.net/4093097093093092/Twisted-Sister-II-Twisted-s-Revenge-book-2-by-Deidra-D-S-Green.pdf
    • http://loaminoo.linkpc.net/5095099090099092/Twisted-Hearts-Twisted-Minds-2-by-Keta-Kendric.pdf
    • http://loaminoo.linkpc.net/1092095092099093/Twisted-Reasons-Twisted-Trilogy-1-by-Geza-Tatrallyay.pdf
    • http://loaminoo.linkpc.net/2093090091090091/Mary-Engelbreit-s-Nursery-Tales-A-Treasury-of-Children-s-Classics-by-Mary-Engelbreit.pdf
    • http://loaminoo.linkpc.net/2099092098097091/Twisted-Arrangement-Twisted-1-by-Mora-Early.pdf
    • http://loaminoo.linkpc.net/2098092092094093/Twisted-Fate-Twisted-1-by-Jessi-Elliott.pdf
    • http://loaminoo.linkpc.net/6091097090099093/Twisted-Boulevard-Tales-of-Urban-Fantasy-by-Angela-

Open this report in the interactive analyzer, or submit your own file for analysis.