Malicious PDF — malware analysis report

Static analysis result for SHA-256 8bb10eb6e00e3903…

MALICIOUS

PDF

15.7 KB Created: 2019-05-02 01:10:29 +01:00 Authoring application: mPDF 5.7
MD5: f8eb84d07b1647ca0e9591019e2f8627 SHA-1: e5a1db0c293e739fc2a27aa49f166ca0cb038c6c SHA-256: 8bb10eb6e00e3903243a4c288103cd3eb6421ed4d99b57fe0c2f3bc7d7cef87e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file was flagged by a machine learning classifier as malicious and contains a large number of embedded external links, indicative of a link farm. The primary heuristic identified this as a PDF_SEO_LINK_FARM, suggesting the document's purpose is to generate traffic or distribute content through these links. While no scripts were extracted, the sheer volume and nature of the links point towards a content-distribution or redirection scheme.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9880

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4098096093096090/Wild-Ride-Let-it-Ride-2-by-Cynthia-Rayne.pdf
    • http://loaminoo.linkpc.net/4091093090094092/Wild-Ride-Playing-for-Keeps-2-by-Cathryn-Fox.pdf
    • http://loaminoo.linkpc.net/2095096093097091/A-Wild-Ride-The-Bullriders-1-by-Andrew-Grey.pdf
    • http://loaminoo.linkpc.net/6095096090092097/That-Deaf-Guy-A-Wild-Ride-by-Matt-Daigle.pdf
    • http://loaminoo.linkpc.net/8095092090097/Wild-Irish-Ride-Weldon-1-by-Jennifer-Saints.pdf
    • http://loaminoo.linkpc.net/4090099093090091/Wild-Ride-Black-Knights-Inc-9-by-Julie-Ann-Walker.pdf
    • http://loaminoo.linkpc.net/4099092098097097/Wild-Ride-Cowboy-Copper-Ridge-9-by-Maisey-Yates.pdf
    • http://loaminoo.linkpc.net/9093096097092098/The-Outlaw-Bank-A-Wild-Ride-Into-the-Secret-Heart-of-Bcci-by-Jonathan-Beaty.pdf
    • http://loaminoo.linkpc.net/5099090096096093/Billionaire-Part-1-Billionaire-1-by-Juliette-Jones.pdf
    • http://loaminoo.linkpc.net/1096099099099098/Billionaire-Complete-Set-Billionaire-1-7-by-Juliette-Jones.pdf
    • http://loaminoo.linkpc.net/4095098099097095/Dillinger-s-Wild-Ride-The-Year-That-Made-America-s-Public-Enemy-Number-One-by-Elliott-J-Gorn.pdf
    • http://loaminoo.linkpc.net/3093095091093094/Blood-Aces-The-Wild-Ride-of-Benny-Binion-the-Texas-Gangster-Who-Created-Vegas-Poker-by-Doug-J-Swanson.pdf
    • http://loaminoo.linkpc.net/3091097099092/Wild-Boy-by-Rob-Lloyd-Jones.pdf
    • http://loaminoo.linkpc.net/1094095099090091/Love-Unexpectedly-Wild-Ride-To-Love-2-by-Susan-Fox.pdf
    • http://loaminoo.linkpc.net/4099096091099094/Claimed-by-Love-Wild-Hunters-1-by-Skye-Jones.pdf
    • http://loaminoo.linkpc.net/4099099098092090/Wild-Heart-Summer-A-Sugar-Creek-Novel-by-Jenny-B-Jones.pdf
    • http://loaminoo.linkpc.net/2092093092094092/The-Juliette-Society-The-Juliette-Society-1-by-Sasha-Grey.pdf
    • http://loaminoo.linkpc.net/4095096091097094/Ride-Hard-Ride-Fast-Seven-Devils-MC-1-by-Candice-Owen.pdf
    • http://loaminoo.linkpc.net/1094096093092098/Wilde-Ride-Ride-1-by-Maegan-Lynn-Moores.pdf
    • http://loaminoo.linkpc.net/3099092097092096/Forever-Ride-Hellions-Ride-2-by-Chelsea-Camaron.pdf
    • http://loaminoo.linkpc.net/4095098099097095/D

Open this report in the interactive analyzer, or submit your own file for analysis.