Malicious PDF — malware analysis report

Static analysis result for SHA-256 8c16d3ecddf49f0b…

MALICIOUS

PDF

13.7 KB Created: 2019-05-02 02:07:27 +01:00 Authoring application: mPDF 5.7
MD5: fcaa3bc01a6cb652982333d1142fe0d2 SHA-1: 6174e9276d38c2f64eb579e3ffb5cbc21401d676 SHA-256: 8c16d3ecddf49f0bbd5b80c28eb81124621be66d62d98f0524e7b5947b8b9abe
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. While the specific URLs extracted are currently marked as benign, the sheer volume and structure suggest a malicious intent, likely for SEO manipulation or to distribute further malicious content. The ML_NYX_PDF_MALICIOUS classifier also strongly indicated maliciousness.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9102

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/6098095092/The-British-Knight-by-Louise-Bay.pdf
    • http://loaminoo.linkpc.net/2097095094090098/Citizen-Jane-Addams-and-the-Struggle-for-Democracy-by-Louise-W-Knight.pdf
    • http://loaminoo.linkpc.net/2093092092093098/Destiny-of-the-Light-Shadow-Through-Time-1-by-Louise-Cusack.pdf
    • http://loaminoo.linkpc.net/4099098091090093/Light-My-Fire-by-Kristina-Knight.pdf
    • http://loaminoo.linkpc.net/3090095090094092/A-Trick-of-the-Light-Chief-Inspector-Armand-Gamache-7-by-Louise-Penny.pdf
    • http://loaminoo.linkpc.net/3092095096091096/The-Vampire-Gift-7-Prophecies-of-Light-by-E-M-Knight.pdf
    • http://loaminoo.linkpc.net/3098091095093098/Annette-Tison-amp-Talus-Taylor-present-The-Barbapapa-babysitters-by-Annette-Tison.pdf
    • http://loaminoo.linkpc.net/3097099090097092/Louise-s-Dilemma-Louise-Pearlie-3-by-Sarah-R-Shaber.pdf
    • http://loaminoo.linkpc.net/2094091097092093/Evie-s-Knight-The-Knight-Series-1-by-Kimberly-Krey.pdf
    • http://loaminoo.linkpc.net/7095099092098/Killing-Sam-Knight-The-Knight-Chronicles-2-by-John-Cassian.pdf
    • http://loaminoo.linkpc.net/1099099093094099/Being-Sawyer-Knight-Souls-of-the-Knight-1-by-Nicola-Haken.pdf
    • http://loaminoo.linkpc.net/2091098092098096/The-Forever-Knight-The-Bronze-Knight-4-by-John-Marco.pdf
    • http://loaminoo.linkpc.net/8096091098097/Wicked-Knight-Knight-Brothers-1-by-Tierney-O-39-Malley.pdf
    • http://loaminoo.linkpc.net/2099090092093/A-Knight-s-Persuasion-Knight-s-4-by-Catherine-Kean.pdf
    • http://loaminoo.linkpc.net/1091093099092099/The-Last-Knight-Knight-and-Rogue-1-by-Hilari-Bell.pdf
    • http://loaminoo.linkpc.net/7093096097097090/A-Knight-s-Reward-Knight-s-2-by-Catherine-Kean.pdf
    • http://loaminoo.linkpc.net/3098090097094098/Brooklyn-Knight-Piers-Knight-1-by-C-J-Henderson.pdf
    • http://loaminoo.linkpc.net/2095097094091097/Darkest-Knight-City-Knight-5-by-T-A-Webb.pdf
    • http://loaminoo.linkpc.net/3096093091093096/Knight-s-End-Knight-s-Trilogy-1-by-Jami-Montgomery.pdf
    • http://loaminoo.linkpc.net/1092096092095/A-Knight-to-Remember-Knight-2-by-Christina-Dodd.pdf
    • http://loaminoo.linkpc.net/2091098092098096/The-Forever-Knight-The-Bronze-Kn

Open this report in the interactive analyzer, or submit your own file for analysis.