Malicious PDF — malware analysis report

Static analysis result for SHA-256 850d68856489788a…

MALICIOUS

PDF

27.8 KB Created: 2019-05-02 17:33:44 +01:00 Authoring application: mPDF 5.7
MD5: 293cd545d77a89c681488024cd10923b SHA-1: a38aaad812d7f848bfb1d6672f2905943b4f75d2 SHA-256: 850d68856489788ad5e468b2c3ec871d655355ffe00ddf82ca935bcca26b8cff
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded external links, a technique often used for SEO manipulation or to redirect users to malicious content. The ML classifier strongly indicated maliciousness. While no scripts were extracted, the PDF structure itself suggests a malicious intent to distribute links, potentially leading to further compromise.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/5091096099098092/In-the-Museum-of-Man-Race-Anthropology-and-Empire-in-France-1850-1950-by-Alice-L-Conklin.pdf
    • http://loaminoo.linkpc.net/8096093092094095/Japanese-Immigrants-1850-1950-by-Rosemary-Wallner.pdf
    • http://loaminoo.linkpc.net/4093096097095091/Women-Travelers-A-Century-of-Trailblazing-Adventures-1850-1950-by-Alexandra-Lapierre.pdf
    • http://loaminoo.linkpc.net/4098095091098092/A-View-Across-the-Valley-Short-Stories-by-Women-from-Wales-1850-1950-by-Jane-Aaron.pdf
    • http://loaminoo.linkpc.net/1091098099099093096/From-Savage-to-Negro-Anthropology-and-the-Construction-of-Race-1896-1954-by-Lee-D-Baker.pdf
    • http://loaminoo.linkpc.net/8095096093095094/Women-for-Hire-Prostitution-and-Sexuality-in-France-After-1850-by-Alain-Corbin.pdf
    • http://loaminoo.linkpc.net/1097092099093095/Seeds-of-Empire-Cotton-Slavery-and-the-Transformation-of-the-Texas-Borderlands-1800-1850-by-Andrew-J-Torget.pdf
    • http://loaminoo.linkpc.net/4090091093094095/The-Museum-of-Extraordinary-Things-by-Alice-Hoffman.pdf
    • http://loaminoo.linkpc.net/9096092096094094/Opium-Empire-and-the-Global-Political-Economy-A-Study-of-the-Asian-Opium-Trade-1750-1950-by-Carl-A-Trocki.pdf
    • http://loaminoo.linkpc.net/5090096095091092/German-Orientalism-in-the-Age-of-Empire-Religion-Race-and-Scholarship-by-Suzanne-L-Marchand.pdf
    • http://loaminoo.linkpc.net/5091095095099090/The-Blood-of-Government-Race-Empire-the-United-States-and-the-Philippines-by-Paul-A-Kramer.pdf
    • http://loaminoo.linkpc.net/1090093099094091095/Reproducing-Empire-Race-Sex-Science-and-U-S-Imperialism-in-Puerto-Rico-by-Laura-Briggs.pdf
    • http://loaminoo.linkpc.net/3099095093092094/Sleeping-With-Bad-Boys-A-1956-Playboy-Model-s-Escapades-with-James-Dean-Hugh-Hefner-Norman-Mailer-and-the-famous-writers-of-the-1950-s-Beat-Generation-by-Alice-Denham.pdf
    • http://loaminoo.linkpc.net/5091099090090096/Brother-s-Keeper-The-United-States-Race-and-Empire-in-the-British-Caribbean-1937-1962-by-Jason-Parker.pdf
    • http://loaminoo.linkpc.net/1090091091099098092/Short-Guide-Pergamon-Museum-Collection-of-Classical-Antiquities-Museum-of-Western-Asiatic-by-Max-Kunze.pdf
    • http://loaminoo.linkpc.net/9097090093098099/Alice-Lewis-Carroll-Lewis-Carroll-Alice-Im-Wunderland-Vladimir-Nabokov-Das-Spiegellabyrinth-Alice-in-Wonderland-Humpty-Dumpty-Alice-Liddell-John-Tenniel-Cheshire-Cat-Der-Hutmacher-Christian-Enzensberger-by-Source-Wikipedia.pdf
    • http://loaminoo.linkpc.net/6092096097092091/Lais-of-Marie-de-France-Chevrefoil-Eliduc-Yonec-Guigemar-Lanval-Bisclavret-Le-Fresne-the-Lais-of-Marie-de-France-Lastic-Equitan-by-Marie-Dec-France.pdf
    • http://loaminoo.linkpc.net/7097094092099096/Illustrated-Catalogue-of-the-Museum-of-Comparative-Zo-logy-at-Harvard-College-Issue-4-by-Harvard-University-Museum-of-Comparativ.pdf
    • http://loaminoo.linkpc.net/9096099093099091/Formula-5000-in-New-Zealand-amp-Australia-Race-by-Race-by-Wolfgang-Klopfer.pdf
    • http://loaminoo.linkpc.net/9092093093091/Eulogy-by-D-T-Conklin.pdf
    • http://loaminoo.linkpc.net/1097092099093095/Seeds-of-Empire-Cotton-Slavery-and-the-Transformation-of-the-Texas-Bord

Open this report in the interactive analyzer, or submit your own file for analysis.