Malicious PDF — malware analysis report

Static analysis result for SHA-256 852588ba9c3a144f…

MALICIOUS

PDF

26.2 KB Created: 2019-05-02 07:30:08 +01:00 Authoring application: mPDF 5.7
MD5: ecbcdb180c8e80eca13a82245b3bc07e SHA-1: cd802581378efe3213b04621e5c0c807d549b5a0 SHA-256: 852588ba9c3a144f49b615fcb0ad2e7bb25c6ca982fa270768bd78cc6b4e2a54
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded URLs, forming a link farm. The primary heuristic indicates this is a critical finding, suggesting the PDF's purpose is to direct users to a multitude of external resources. While the specific intent of these linked PDFs is unclear, the sheer volume and the heuristic's classification point towards a malicious distribution or SEO-based lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6091094095099096/Addictions-Drug-Rehab-Alcool-Detox-r-cup-ration-de-la-toxicomanie-toxicomanies-Sex-Addiction-Traitement-de-la-toxicomanie-Tout-ce-que-vous-devez-savoir-by-Dale-Waller.pdf
    • http://loaminoo.linkpc.net/8090094092096094/Bi-re-Tout-ce-que-vous-devez-savoir-by-Dale-Waller.pdf
    • http://loaminoo.linkpc.net/6091095092099094/Tout-ce-que-vous-devez-savoir-sur-la-masturbation-f-minine-Il-est-important-pour-les-femmes-de-se-masturber-by-M-Anctil.pdf
    • http://loaminoo.linkpc.net/6091095094098092/Tous-savoir-sur-les-bateaux-Tous-ce-que-vous-devez-savoir-sur-les-bateaux-by-M-Anctil.pdf
    • http://loaminoo.linkpc.net/2099091095092096/Addiction-Recovery-DIY-Do-it-Yourself---Conquer-Your-Drug-or-Alcohol-Addiction-at-Home-by-K-J-Gordon.pdf
    • http://loaminoo.linkpc.net/7093099093099091/The-life-beyond-Drug-Addiction-A-comprehensive-self-help-guide-from-identifying-addiction-to-recovery-process-by-Joanes-Comia.pdf
    • http://loaminoo.linkpc.net/2099091097098097/Slaying-The-Addiction-Monster-An-All-Inclusive-Look-At-Drug-Addiction-In-America-Today-by-Sheryl-Letzgus-McGinnis.pdf
    • http://loaminoo.linkpc.net/6091095094093090/Tout-savoir-Tome-17-by-M-Anctil.pdf
    • http://loaminoo.linkpc.net/6091095094091099/Tout-savoir-Tome-12-by-M-Anctil.pdf
    • http://loaminoo.linkpc.net/8090093094099091/TOUT-SAVOIR-SUR-L-ARGENT-COLLO-DAL-by-JEAN-SILBERMANN.pdf
    • http://loaminoo.linkpc.net/6096093097094090/Tout-ce-qu-un-Papa-doit-savoir-by-Pierre-Ripert.pdf
    • http://loaminoo.linkpc.net/6093092097090090/Guide-pour-investir-Tout-ce-qu-il-fau-savoir-sur-les-investissements-des-gens-riches-qui-by-Robert-T-Kiyosaki.pdf
    • http://loaminoo.linkpc.net/6099098093093098/Tout-savoir-5e-Nouveau-programme-pour-r-viser-dans-toutes-les-mati-res-by-Pascal-Bihou-e.pdf
    • http://loaminoo.linkpc.net/3094096090092095/Voice-Addiction-by-Lilian-R-Dale.pdf
    • http://loaminoo.linkpc.net/2099091097098090/Just-Love-Her-A-Mother-s-Journey-of-Healing-Through-Her-Daughter-s-Drug-Addiction-by-Trina-Hayes.pdf
    • http://loaminoo.linkpc.net/8095099094099091/Didier-Laurens-Comment-vivent-les-SUPER-RICHES-Education-sexe-argent-vous-saurez-tout-by-C-line-De-Fr-minville.pdf
    • http://loaminoo.linkpc.net/6091095094099094/Tout-savoir-sur-le-camping-Depuis-plusieurs-ann-es-le-camping-joue-un-grand-r-le-dans-la-fa-on-de-vivre-de-nombreux-citadins-by-M-Anctil.pdf
    • http://loaminoo.linkpc.net/6093092098096094/Toute-la-fonction-marketing---Savoirs-savoir-faire-savoir--tre-Savoirs-savoir-faire-savoir--tre-by-Nathalie-Van-Laethem.pdf
    • http://loaminoo.linkpc.net/1090094097094098091/Schwimmen-Schwimmen-Home-USA-Schwimmen-Der-Swimming-Pool-Schwimmen-lernen-Schwimmer-Schwimmbad-Alles-was-Sie-wissen-m-ssen-by-Dale-Waller.pdf
    • http://loaminoo.linkpc.net/7092095097095/Natural-Body-Detox-How-To-Naturally-Cleanse-And-Detox-Your-Body-by-Laura-Serio.pdf
    • http://loaminoo.linkpc.net/2099091095092096/Addiction-Recovery-DIY-Do-it-Yourself---Conquer-Your-Drug-or-Alco

Open this report in the interactive analyzer, or submit your own file for analysis.