Malicious PDF — malware analysis report

Static analysis result for SHA-256 8178a1f42a10543f…

MALICIOUS

PDF

13.2 KB Created: 2019-05-01 06:10:43 +01:00 Authoring application: mPDF 5.7
MD5: 04fb5ed2db6386c3234a0e8390f478fe SHA-1: 155609779885ab07d1a4d7c063de3c31e82aab90 SHA-256: 8178a1f42a10543f90e8d0475ba2067c2f75bab7ed4f2a139bf19e2394bd471a
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file was flagged by a machine learning classifier as malicious. Static analysis revealed a large number of embedded links, forming a link farm. These links predominantly point to the 'loaminoo.linkpc.net' domain, suggesting a coordinated effort to distribute content or redirect users to potentially harmful sites. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9006

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6091091095093092/Witch-s-Blood-by-William-Blain.pdf
    • http://loaminoo.linkpc.net/4091097095097095/Water-Witch-Blood-Witch-Bone-Witch-Witches-of-Etlantium-1-3-by-Thea-Atkinson.pdf
    • http://loaminoo.linkpc.net/6091091093098098/Beneath-a-Blood-Moon-by-R-J-Blain.pdf
    • http://loaminoo.linkpc.net/3096095091094091/Blood-Witch-Blood-Canticles-1-by-Naomi-Clark.pdf
    • http://loaminoo.linkpc.net/2097097095091097/Fire-in-the-Blood-Bad-Witch-4-by-Robyn-Bachar.pdf
    • http://loaminoo.linkpc.net/7099095094095095/Elf-Blood-Witch-Fairy-14-by-Bonnie-Lamer.pdf
    • http://loaminoo.linkpc.net/2092091096098095/Bound-by-Blood-The-Garner-Witch-1-by-P-A-Lupton.pdf
    • http://loaminoo.linkpc.net/2093094099091094/Blood-on-the-Moon-The-Federal-Witch-7-by-T-S-Paul.pdf
    • http://loaminoo.linkpc.net/1091096090090097/Blood-Witch-Sweep-3-by-Cate-Tiernan.pdf
    • http://loaminoo.linkpc.net/1097092095096090/Blood-Witch-Sweep-3-by-Cate-Tiernan.pdf
    • http://loaminoo.linkpc.net/1091090090098090090/Cindy-Witch-Blood-and-Snow-13-by-RaShelle-Workman.pdf
    • http://loaminoo.linkpc.net/3091096097097099/Shadow-Blood-Witch-Fairy-4-by-Bonnie-Lamer.pdf
    • http://loaminoo.linkpc.net/5092099093095/The-Blood-Maker-and-the-Witch-s-Curse-by-Jaromy-Henry.pdf
    • http://loaminoo.linkpc.net/1096096092099096/Blood-Rush-Lost-Witch-2-by-Katie-Lee-O-39-Guinn.pdf
    • http://loaminoo.linkpc.net/3092097096095096/Blood-Witch-Elemental-Magic-2-by-Thea-Atkinson.pdf
    • http://loaminoo.linkpc.net/3091096097097098/Blood-of-Half-Gods-Witch-Fairy-5-by-Bonnie-Lamer.pdf
    • http://loaminoo.linkpc.net/4096098098098094/Binding-Magick-The-Witch-Blood-Chronicles-1-by-Debbie-Cassidy.pdf
    • http://loaminoo.linkpc.net/2099090099095/Blood-Related-by-William-Cook.pdf
    • http://loaminoo.linkpc.net/9099097098098099/The-Blood-Of-The-Poet-Selected-Poems-by-William-Everson.pdf
    • http://loaminoo.linkpc.net/1091095092096091094/Blood-on-the-Water-William-Monk-20-by-Anne-Perry.pdf
    • http://loaminoo.linkpc.net/109609609209909

Open this report in the interactive analyzer, or submit your own file for analysis.