Malicious PDF — malware analysis report

Static analysis result for SHA-256 9316e98cd176739a…

MALICIOUS

PDF

17.7 KB Created: 2019-04-30 05:04:50 +01:00 Authoring application: mPDF 5.7
MD5: eed925a1ff2ce70383e024659e9457a3 SHA-1: 031c09e87a818ae7a1cf6151e7c8f5a894f7694e SHA-256: 9316e98cd176739a8ef0b142bc55b9a5505c8bd88b56d4b63332f648731ffe3f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file contains a large number of embedded URLs, identified as a link farm. The ML classifier strongly flagged this PDF as malicious. The primary attack pattern involves directing users to a network of external PDF files hosted on 'loaminoo.linkpc.net', likely as a lure or to distribute further malicious content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1097091097095090/Her-Master-s-Kiss-2-Her-Master-s-Kiss-2-by-Vivien-Sparx.pdf
    • http://loaminoo.linkpc.net/1097091097095096/Her-Master-s-Kiss-3-Her-Master-s-Kiss-3-by-Vivien-Sparx.pdf
    • http://loaminoo.linkpc.net/1097090091094090/Her-Master-s-Kiss-5-by-Vivien-Sparx.pdf
    • http://loaminoo.linkpc.net/1097091093091091/The-Devil-s-Touch-by-Vivien-Sparx.pdf
    • http://loaminoo.linkpc.net/4095091092091091/Alicia-The-Unleashed-Series-by-Vivien-Sparx.pdf
    • http://loaminoo.linkpc.net/9095097097091097/A-Kiss-Before-Lying-Last-Kiss-Series-Book-1-by-Bethany-Hensel.pdf
    • http://loaminoo.linkpc.net/2090096093091091/Kiss-Across-Kingdoms-Kiss-Across-Time-5-by-Tracy-Cooper-Posey.pdf
    • http://loaminoo.linkpc.net/2090096093091096/Kiss-Across-Swords-Kiss-Across-Time-2-by-Tracy-Cooper-Posey.pdf
    • http://loaminoo.linkpc.net/4094094091097099/The-Dark-Warrior-Series-The-Complete-Collection-Contains-Midnight-s-Master-Midnight-s-Lover-Midnight-s-Seduction-Midnight-s-Warrior-Midnight-s-Kiss-Surrender-novella-Dark-Warriors-by-Donna-Grant.pdf
    • http://loaminoo.linkpc.net/3099092093091094/Master-of-Wisdom-Writings-of-the-Buddhist-Master-Nagarjuna-by-Christian-Lindtner.pdf
    • http://loaminoo.linkpc.net/4098090094097093/Miria-Becomes-His---Owned-by-the-Master-Book-One-A-BDSM-Master-Slave-Romance-by-Casey-Cane.pdf
    • http://loaminoo.linkpc.net/1090095097099093/Always-Kiss-Me-Goodnight-Guardian-Kiss-1-by-Megan-Gaudino.pdf
    • http://loaminoo.linkpc.net/5099094096092/Kiss-of-Night-Kiss-Trilogy-1-by-Debbie-Vigui-.pdf
    • http://loaminoo.linkpc.net/1092096095099097/The-Master-Time-Master-3-by-Louise-Cooper.pdf
    • http://loaminoo.linkpc.net/4096092092098091/Master-By-Choice-The-Accidental-Master-2-by-M-A-Innes.pdf
    • http://loaminoo.linkpc.net/2090091097094093/To-Kiss-a-Spy-Kiss-2-by-Jane-Feather.pdf
    • http://loaminoo.linkpc.net/3090096098099098/Kiss-Me-Kiss-of-Death-2-by-L-P-Lovell.pdf
    • http://loaminoo.linkpc.net/8096092098096/If-We-Kiss-If-We-Kiss-1-by-Rachel-Vail.pdf
    • http://loaminoo.linkpc.net/4098092091094098/Second-Kiss-Second-Kiss-1-by-Natalie-Palmer.pdf
    • http://loaminoo.linkpc.net/2090093096097094/Itazura-Na-Kiss-Volume-5-Itazura-Na-Kiss-5-by-Kaoru-Tada.pdf
    • http://loaminoo.linkpc.net/4094094091097099/The-Dark-Warrior-Series-The-Complete-Collection-Contains-Midnight-s-Master-Midnight-s-Lover-Midnight-s-S

Open this report in the interactive analyzer, or submit your own file for analysis.