Malicious PDF — malware analysis report

Static analysis result for SHA-256 817a04c9ddb3115b…

MALICIOUS

PDF

14.8 KB Created: 2019-04-30 17:18:31 +01:00 Authoring application: mPDF 5.7
MD5: a2c20046b07a7b24149458e3b3391d18 SHA-1: d12840841d58b3e6f83f237cbc71985cb8be667b SHA-256: 817a04c9ddb3115bc6964bce5e61eceb9d10e9ca9fcf793186f480f3d578e7cb
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF file contains a large number of embedded links to external PDF documents, all hosted on the 'loaminoo.linkpc.net' domain. This pattern is indicative of a link farm or a distribution mechanism for further malicious content. The ML classifier strongly supports the malicious verdict. While no scripts were extracted, the PDF structure and embedded URLs suggest a deceptive or malicious intent.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/7099097092091096/Black-Out-Hawks-Motorcycle-Club-3-by-Lila-Rose.pdf
    • http://loaminoo.linkpc.net/3096096093095095/Club-Girl-Hell-Brigade-Motorcycle-Club-Book-1-by-Evelyn-Glass.pdf
    • http://loaminoo.linkpc.net/4091094099099097/Know-Me-Defiant-Motorcycle-Club-1-by-Cora-Brent.pdf
    • http://loaminoo.linkpc.net/2096098096092092/Wrapped-Around-Him-Moroad-Motorcycle-Club-1-by-Debra-Kayn.pdf
    • http://loaminoo.linkpc.net/3096094096093095/Coming-Out-Hawks-Motorcycle-Club-4-5-by-Lila-Rose.pdf
    • http://loaminoo.linkpc.net/1094095094090096/Holding-Out-Hawks-Motorcycle-Club-1-by-Lila-Rose.pdf
    • http://loaminoo.linkpc.net/1093093094093092/Promise-Me-Defiant-Motorcycle-Club-2-by-Cora-Brent.pdf
    • http://loaminoo.linkpc.net/4095096096098098/Original-Sin-Dark-Saints-Motorcycle-Club-1-by-Amy-Love.pdf
    • http://loaminoo.linkpc.net/6097093099095098/The-Libertines-Motorcycle-Club-An-Outlaw-Is-Born-by-Max-L-Billington.pdf
    • http://loaminoo.linkpc.net/4095096093091095/Situation-Normal-Lima-Six-Motorcycle-Club-2-by-Kathryn-Thomas.pdf
    • http://loaminoo.linkpc.net/4095095099090091/Taming-Blaze-Inferno-Motorcycle-Club-1-by-Sabrina-Paige.pdf
    • http://loaminoo.linkpc.net/2096093096099098/Lilith-Lucifer-s-Legion-Motorcycle-Club-1-by-Kelli-Maine.pdf
    • http://loaminoo.linkpc.net/1098094096091096/Claiming-His-Fate-Feral-Breed-Motorcycle-Club-1-by-Ellis-Leigh.pdf
    • http://loaminoo.linkpc.net/2099098099094091/Bash-Volume-III-Rolling-Thunder-Motorcycle-Club-5-by-Candace-Blevins.pdf
    • http://loaminoo.linkpc.net/4095096097093095/Claiming-His-Desire-Feral-Breed-Motorcycle-Club-6-by-Ellis-Leigh.pdf
    • http://loaminoo.linkpc.net/3096096093095090/Claiming-His-Fate-Feral-Breed-Motorcycle-Club-1-by-Ellis-Leigh.pdf
    • http://loaminoo.linkpc.net/4095096095095098/The-Alpha-s-Choice-Roadside-Angels-Motorcycle-Club-3-by-Kathryn-Thomas.pdf
    • http://loaminoo.linkpc.net/2099091098098099/Game-Changer-Hells-Saints-Motorcycle-Club-1-by-Paula-Marinaro.pdf
    • http://loaminoo.linkpc.net/4094092094096091/Taming-Crow-Hells-Saints-Motorcycle-Club-3-by-Paula-Marinaro.pdf
    • http://loaminoo.linkpc.net/3095098093090091/Bash-Volume-I-Rolling-Thunder-Motorcycle-Club-3-by-Candace-Blevins.pdf
    • http://loaminoo.linkpc.net/10980

Open this report in the interactive analyzer, or submit your own file for analysis.