Malicious PDF — malware analysis report

Static analysis result for SHA-256 82278f9a88dafd09…

MALICIOUS

PDF

27.9 KB Created: 2019-05-02 07:33:40 +01:00 Authoring application: mPDF 5.7
MD5: 2eefc8bd020b3aefe7c0f6c475b21f8b SHA-1: 65d58a6e8b4486d4a24dd97de93e24a75cc0aaf2 SHA-256: 82278f9a88dafd096f5bbc894060ff0f82380be56e2f177eb36ee896326c85cf
92 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment

The PDF contains a large number of embedded links pointing to external PDFs hosted on a dynamic DNS domain, as indicated by the PDF_SEO_LINK_FARM heuristic. While the ML classifier also flagged this as malicious, the specific intent appears to be the creation of a link farm rather than direct payload delivery. The document body was unreadable, preventing further analysis of its immediate purpose.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/7093094096096097/Southern-Peloponnese-Car-Tours-and-Walks-Landscapes-Series-by-Michael-Cullen.pdf
    • http://loaminoo.linkpc.net/9097095092091092/Recounting-Deviance-Forms-and-Practices-of-Presenting-Divergent-Behaviour-in-the-Late-Middle-Ages-and-Early-Modern-Period-by-Jorg-Rogge.pdf
    • http://loaminoo.linkpc.net/7093094094097092/Peloponnese-Achaea-Elis-History-of-the-Peloponnese-Peloponnese-Periphery-Peneus-Morean-War-Ilia-Prefecture-Olympia-Greece-by-Books-LLC.pdf
    • http://loaminoo.linkpc.net/7093094093098093/Southern-Peloponnese-by-Sunflower-Guides.pdf
    • http://loaminoo.linkpc.net/7093094095095095/Southern-Greece-An-Archaeological-Guide-Attica-Delphi-And-The-Peloponnese-by-Robert-Manuel-Cook.pdf
    • http://loaminoo.linkpc.net/7093094097095094/The-Significance-of-Votive-Offerings-in-Selected-Hera-Sanctuaries-in-the-Peloponnese-Ionia-and-Western-Greece-by-Jens-David-Baumbach.pdf
    • http://loaminoo.linkpc.net/7093094096097090/Peloponnese-Sights-a-travel-guide-to-the-top-50-attractions-and-beaches-in-Peloponnese-Greece-by-MobileReference.pdf
    • http://loaminoo.linkpc.net/7094096095098095/The-Jungle-The-Exposure-of-Health-Violations-and-Unsanitary-Practices-in-the-American-Meatpacking-Industry-During-the-Early-20th-Century-by-Upton-Sinclair.pdf
    • http://loaminoo.linkpc.net/1091099091094096096/Out-Where-the-West-Begins-Profiles-Visions-and-Strategies-of-Early-Western-Business-Leaders-by-Philip-F-Anschutz.pdf
    • http://loaminoo.linkpc.net/7095093093091096/The-E-Myth-Accountant-Why-Most-Accounting-Practices-Don-t-Work-and-What-to-Do-about-It-by-Michael-E-Gerber.pdf
    • http://loaminoo.linkpc.net/1091095090096090090/Manhood-Acts-Gender-and-the-Practices-of-Domination-by-Michael-Schwalbe.pdf
    • http://loaminoo.linkpc.net/6094095099096095/Heart-of-Darkness-Unabridged-Deluxe-Edition-An-Early-Modernist-Novel-From-the-Author-of-Nostromo-Lord-Jim-The-Secret-Agent-and-Under-Western-Eyes-Memoirs-Letters-amp-Critical-Essays-by-Joseph-Conrad.pdf
    • http://loaminoo.linkpc.net/9092099099096092/A-Photographic-Guide-To-Birds-Of-Southern-Florida-by-G-Michael-Flieg.pdf
    • http://loaminoo.linkpc.net/9094095093095098/My-Life-with-Michael-A-Novel-of-Sex-Beer-and-Middle-Age-by-Lori-Schafer.pdf
    • http://loaminoo.linkpc.net/2092093094097/53-Is-the-New-38-Tales-of-Indignity-and-Middle-Age-by-Michael-Anthony-Turpin.pdf
    • http://loaminoo.linkpc.net/1096095098091093/Early-Renaissance-by-Michael-Levey.pdf
    • http://loaminoo.linkpc.net/9093097091098098/The-Fallacy-of-the-Calorie-Why-the-Modern-Western-Diet-Is-Killing-Us-and-How-to-Stop-It-by-Michael-S-Fenster.pdf
    • http://loaminoo.linkpc.net/2095095091099092/Made-In-Texas-George-W-Bush-And-The-Southern-Takeover-Of-American-Politics-by-Michael-Lind.pdf
    • http://loaminoo.linkpc.net/3092093096094099/The-Redemption-of-Michael-Hollister-A-Middle-Falls-Time-Travel-Novel-by-Shawn-Inmon.pdf
    • http://loaminoo.linkpc.net/7098094095094092/Jesus-Jihad-and-Peace-A-Prophetic-Vision-for-the-Middle-East-by-Michael-Youssef.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.