Malicious PDF — malware analysis report

Static analysis result for SHA-256 90f07a5ba5bf7c8e…

MALICIOUS

PDF

16.1 KB Created: 2019-05-02 01:36:41 +01:00 Authoring application: mPDF 5.7
MD5: 35d54e2bb914595e88e55b2f2d8bf274 SHA-1: e91e639cef0d78fed0ff5d14d852e599b9aab309 SHA-256: 90f07a5ba5bf7c8ea6606142d8a538cc94102de0610234b9e7826e74602adf83
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links to external PDF documents, primarily hosted on the loaminoo.linkpc.net domain. This heuristic, combined with the ML classifier's high confidence, suggests a link-farming or redirection attack. No scripts were extracted, and the document body was not readable, limiting further analysis of the specific lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3090096097095096/Hunters-Quest-Hunters-of-Reloria-series-2-by-Kasper-Beaumont.pdf
    • http://loaminoo.linkpc.net/1091091090093095099/The-Hunter-s-Creed-A-great-primer-for-new-hunters-and-a-good-refresher-for-seasoned-hunters-by-Garn-Christensen.pdf
    • http://loaminoo.linkpc.net/1098092091099094/Hunters-Interlude-Hunters-3-amp-4-by-Shiloh-Walker.pdf
    • http://loaminoo.linkpc.net/1097090098093092/Demon-Hunters-Trinity-Demon-Hunters-1-by-Olivia-Chase.pdf
    • http://loaminoo.linkpc.net/1090097098098097/The-Hunters-Bloodline-Series-Book-1-by-Maria-Bunda.pdf
    • http://loaminoo.linkpc.net/3099093091099097/The-Reindeer-Hunters-Reindeer-Hunters-3-by-Joan-Wolf.pdf
    • http://loaminoo.linkpc.net/4099097096096099/Hunters-of-Chaos-Hunters-of-Chaos-1-by-Crystal-Vel-squez.pdf
    • http://loaminoo.linkpc.net/5098090099092/Treasure-Hunters-Treasure-Hunters-1-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/6096091093091090/Alien-Hunters-Alien-Hunters-1-by-Daniel-Arenson.pdf
    • http://loaminoo.linkpc.net/3092091090094093/The-Time-Hunters-Time-Hunters-1-by-Carl-Ashmore.pdf
    • http://loaminoo.linkpc.net/1090096091093093/Charlie-Sullivan-and-the-Monster-Hunters-The-Varcolac-s-Diary-Charlie-Sullivan-and-the-Monster-Hunters-1-by-D-C-McGannon.pdf
    • http://loaminoo.linkpc.net/1097098098099095/The-Dragon-Within-Dragon-Hunters-Series-2-by-Jeanne-Guzman.pdf
    • http://loaminoo.linkpc.net/2097097090097098/Hunters-by-Stefanie-J-Pristavu.pdf
    • http://loaminoo.linkpc.net/4092094090094094/In-the-City-of-Shy-Hunters-by-Tom-Spanbauer.pdf
    • http://loaminoo.linkpc.net/1096097094092097/The-Hunters-by-Heidi-Angell.pdf
    • http://loaminoo.linkpc.net/4093094092099098/Hunters-by-Michelle-Marquis.pdf
    • http://loaminoo.linkpc.net/9092099090099097/Hie-to-the-Hunters-by-Jesse-Stuart.pdf
    • http://loaminoo.linkpc.net/3090099097096093/Bounty-Hunters-Inc-2-by-Emilia-Watson.pdf
    • http://loaminoo.linkpc.net/2096090099094095/Eli-and-Sarel-The-Hunters-2-by-Shiloh-Walker.pdf
    • http://loaminoo.linkpc.net/1098096092093099/Promises-Part-1-Bounty-Hunters-1-by-A-E-Via.pdf
    • http://loaminoo.linkpc.net/6096091093091090/Alien-Hunters-Alien

Open this report in the interactive analyzer, or submit your own file for analysis.