Malicious PDF — malware analysis report

Static analysis result for SHA-256 975781a106422771…

MALICIOUS

PDF

16.1 KB Created: 2019-04-30 05:25:21 +01:00 Authoring application: mPDF 5.7
MD5: af3ca7e68088bbf65857f4aba81f3496 SHA-1: d2037d19d4200d6899050866903075f00fc648ab SHA-256: 975781a10642277104e38717a27f37a86f2a5b6d25b4904a196d367bae9c982d
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF document contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this PDF as malicious with high confidence. While no scripts were extracted, the structure suggests a link farm designed to manipulate search engine results or distribute potentially unwanted content. The primary IOCs are the numerous URLs embedded within the document.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4095097093091092/The-Bed-Wife-The-Bed-Wife-Chronicles-1-by-Suzanna-Lynn.pdf
    • http://loaminoo.linkpc.net/1098092090098091/The-Bed-Wife-The-Bed-Wife-Chronicles-1-by-Suzanna-Lynn.pdf
    • http://loaminoo.linkpc.net/4098092090099093/The-Bed-Wife-The-Bed-Wife-Chronicles-1-by-Suzanna-Lynn.pdf
    • http://loaminoo.linkpc.net/1091091094090099093/My-Wife-The-Hotwife-cuckold-chastity-cheating-wife-housewife-taboo-humiliation-size-queen-stretching-loving-wives-open-marriage-by-Ronnie-Kinski.pdf
    • http://loaminoo.linkpc.net/5096097090099099/My-Wife-Is-My-Wife-1-by-Adam-Cuong.pdf
    • http://loaminoo.linkpc.net/8093099098094092/Sissy-Husband---Pornstar-Wife-Slurpy-cuckolding-and-female-domination-at-the-hands-of-my-pornstar-wife-The-Femdom-Trilogy-Book-1-by-Elle-Mesen.pdf
    • http://loaminoo.linkpc.net/1095097094098094/The-Crow-King-s-Wife-The-Elder-Blood-Chronicles-5-by-Melissa-Myers.pdf
    • http://loaminoo.linkpc.net/4099090099090/Forever-a-Hustler-s-Wife-A-Hustler-s-Wife-2-by-Nikki-Turner.pdf
    • http://loaminoo.linkpc.net/7096098090097097/My-Wife-His-Fiance-His-Wife-My-Fiance-Book-1-by-Chaise-Gaines.pdf
    • http://loaminoo.linkpc.net/7095096091093/A-Hustler-s-Wife-A-Hustler-s-Wife-1-by-Nikki-Turner.pdf
    • http://loaminoo.linkpc.net/3092098091090/The-Kitchen-God-s-Wife-by-Amy-Tan.pdf
    • http://loaminoo.linkpc.net/1091090093097098095/As-My-Wife-by-Groovy-Lee.pdf
    • http://loaminoo.linkpc.net/9099097099098/My-Only-Wife-by-Jac-Jemc.pdf
    • http://loaminoo.linkpc.net/7092092099095091/The-Curate-s-Wife-by-E-H-Young.pdf
    • http://loaminoo.linkpc.net/3090091095092094/Second-Best-Wife-by-Isobel-Chace.pdf
    • http://loaminoo.linkpc.net/8096096091/The-Wife-Before-Me-by-Laura-Elliot.pdf
    • http://loaminoo.linkpc.net/1097093095090/The-Spy-s-Wife-by-Reginald-Hill.pdf
    • http://loaminoo.linkpc.net/5091090096095095/What-Lot-s-Wife-Saw-by-Ioanna-Bourazopoulou.pdf
    • http://loaminoo.linkpc.net/1096098092090095/The-Tiger-s-Wife-by-T-a-Obreht.pdf
    • http://loaminoo.linkpc.net/5092091094090099/The-Bootlegger-s-Wife-by-Terri-Lee.pdf
    • http://loaminoo.linkpc.net/8093099098094092/Sissy-Husband---Pornstar-Wife-Slurpy-cuckolding-and-female-domination-at-the-hands-of-my-pornstar-wife-The-Femdom-Trilogy-Book-1-by-Elle-Mesen.p

Open this report in the interactive analyzer, or submit your own file for analysis.