Malicious PDF — malware analysis report

Static analysis result for SHA-256 8cee8d6c95549f86…

MALICIOUS

PDF

16.5 KB Created: 2019-05-01 20:23:03 +01:00 Authoring application: mPDF 5.7
MD5: b5fc19cc373fbf56ced368b1cc5d587c SHA-1: ed5141538894018848e06f0cd87ee2d1d24dbefb SHA-256: 8cee8d6c95549f86951dd482d891794427b49a97fbd5000d97839ca202193165
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a mass external link farm, directing users to numerous other PDF documents hosted on loaminoo.linkpc.net. This is indicative of a SEO poisoning or link-farming attack, likely intended to drive traffic or potentially host malicious content disguised as legitimate documents. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo
    • http://loaminoo.linkpc.net/8096093099098096/R-U-R---Rossums-Universal-Robots-Utopisches-Kollektivdrama-in-drei-Aufz-gen-W-U-R---Werstands-Universal-Robots-Edition-Murr-5-by-Karel-apek.pdf
    • http://loaminoo.linkpc.net/6093093090096094/Southwest-Traveler-Lost-Mines-Buried-Treasure-A-Guide-to-Sites-and-Legends-of-the-Southwest-American-Traveler-Series-by-Edward-Rochette.pdf
    • http://loaminoo.linkpc.net/3092094092095097/The-Traveler-s-Gate-Trilogy-Traveler-s-Gate-1-3-by-Will-Wight.pdf
    • http://loaminoo.linkpc.net/8094099093095099/Universal-War-Two---tom-1-by-Denis-Bajram.pdf
    • http://loaminoo.linkpc.net/8098097097096097/Symbols-Our-Universal-Language-by-Eva-C-Hangen.pdf
    • http://loaminoo.linkpc.net/7091099095096097/B-P-R-D-Vol-6-The-Universal-Machine-by-Mike-Mignola.pdf
    • http://loaminoo.linkpc.net/1091093097092090091/Islam-amp-the-Third-Universal-Theo-by-Ayoub.pdf
    • http://loaminoo.linkpc.net/7098090091098098/Universal-Monsters-Frankenstein-by-Den-Beauvais.pdf
    • http://loaminoo.linkpc.net/7091099096097094/Universal-Language-by-Robert-T-Jeschonek.pdf
    • http://loaminoo.linkpc.net/8094099095090094/Universal-War-One-T01-La-Gen-se-by-Denis-Bajram.pdf
    • http://loaminoo.linkpc.net/8094099093095091/Le-temps-du-d-sert-Universal-War-Two-1-by-Denis-Bajram.pdf
    • http://loaminoo.linkpc.net/4097097092097096/Beethoven-The-Universal-Composer-by-Edmund-Morris.pdf
    • http://loaminoo.linkpc.net/1090095092098091096/Genius-of-Universal-Emancipation-Volume-265-by-Anonymous.pdf
    • http://loaminoo.linkpc.net/7091099096091092/Universal-Time-by-Karen-Lynn-Allen.pdf
    • http://loaminoo.linkpc.net/3092094094090/The-Universal-Tone-My-Life-by-Carlos-Santana.pdf
    • http://loaminoo.linkpc.net/2099092096090096/Numbers-The-Universal-Language-by-Denis-Guedj.pdf
    • http://loaminoo.linkpc.net/7092098094096094/A-New-General-and-Universal-Atlas-by-Andrew-Dury.pdf
    • http://loaminoo.linkpc.net/6092093090091096/Diccionari-Enciclopedic-Universal-by-Ramon-Bastardes-Porcel.pdf
    • http://loaminoo.linkpc.net/7091099097091090/The-Spirit-of-Life-A-Universal-Affirmation-by-J-rgen-Moltmann.pdf
    • http://loaminoo.linkpc.net/3092095091093091/Water-Thief-Universal-Companions-1-by-Julia-Golding.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.