Malicious PDF — malware analysis report

Static analysis result for SHA-256 81dd2f10fd27dd82…

MALICIOUS

PDF

15.7 KB Created: 2019-04-29 23:36:01 +01:00 Authoring application: mPDF 5.7
MD5: f3d1a0a54235f74d8c2d4f723dfb8494 SHA-1: 5fdb1280e79f7fbbc3026516b8f0cea07fe52769 SHA-256: 81dd2f10fd27dd82d740f7d8c4fdba171aac288262cb38745da5f99913854e1f
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded external links, identified as a 'link farm' heuristic. The ML classifier also flagged this PDF as malicious. The embedded URLs, while marked as benign, are part of a pattern to direct users to a dynamic DNS domain, likely for a content-luring or phishing scheme.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9880

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1092095090096097/Burning-Bright-Flynn-2-by-Sophie-McKenzie.pdf
    • http://loaminoo.linkpc.net/1093095096094091/The-Thief-Medusa-Project-2-5-by-Sophie-McKenzie.pdf
    • http://loaminoo.linkpc.net/4096098094090/Double-Cross-Medusa-Project-5-by-Sophie-McKenzie.pdf
    • http://loaminoo.linkpc.net/4091099097095/Blood-Ransom-Blood-Ties-2-by-Sophie-McKenzie.pdf
    • http://loaminoo.linkpc.net/1091098093094096098/Like-to-Die-A-McKenzie-Novel-Twin-Cities-P-I-Mac-McKenzie-Novels-Book-15-by-David-Housewright.pdf
    • http://loaminoo.linkpc.net/4092098090092/Trust-Trilogy-Trust-Trilogy-1-3-Trust-series-1-8-by-Cristiane-Serruya.pdf
    • http://loaminoo.linkpc.net/3097099092093094/Trust-In-Darkness-The-Vampire-Diaries-In-Time-We-Trust-1-by-Michelle-Hazen.pdf
    • http://loaminoo.linkpc.net/1093095093099098/Tragedy-amp-Trust-Can-You-Still-Trust-God-After-Losing-a-Child-by-Thom-Vines.pdf
    • http://loaminoo.linkpc.net/3092099090094099/Trust-Me-I-m-Lying-Trust-Me-1-by-Mary-Elizabeth-Summer.pdf
    • http://loaminoo.linkpc.net/1099098098/Trust-Me-I-m-Trouble-Trust-Me-2-by-Mary-Elizabeth-Summer.pdf
    • http://loaminoo.linkpc.net/6094096093096/Trust-A-New-Beginning-Trust-Trilogy-1-by-Cristiane-Serruya.pdf
    • http://loaminoo.linkpc.net/5098096098093097/Nothing-Stopped-Sophie-The-Story-of-Unshakable-Mathematician-Sophie-Germain-by-Cheryl-Bardoe.pdf
    • http://loaminoo.linkpc.net/2094094094090090/Sophie-s-Snail-Sophie-1-by-Dick-King-Smith.pdf
    • http://loaminoo.linkpc.net/6091099092091099/Sophie-s-World-Sophie-1-by-Nancy-N-Rue.pdf
    • http://loaminoo.linkpc.net/6091099092092092/Sophie-s-Secret-Sophie-2-by-Nancy-N-Rue.pdf
    • http://loaminoo.linkpc.net/1091098093094097091/No-Cry-For-Help-by-Grant-McKenzie.pdf
    • http://loaminoo.linkpc.net/8099092095091091/Of-Ice-and-Men-by-McKenzie-Funk.pdf
    • http://loaminoo.linkpc.net/2097093094096090/No-Cry-for-Help-by-Grant-McKenzie.pdf
    • http://loaminoo.linkpc.net/1095090095095092/The-Last-Letter-by-Kirsten-McKenzie.pdf
    • http://loaminoo.linkpc.net/2090095097096091/Shift-Happens-Carus-1-by-J-C-McKenzie.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.