Malicious PDF — malware analysis report

Static analysis result for SHA-256 975cbe45481997d2…

MALICIOUS

PDF

17.9 KB Created: 2019-04-30 04:59:12 +01:00 Authoring application: mPDF 5.7
MD5: 152b254d05f1b38990b91a5a464c3388 SHA-1: 6e316d51ced7fe883ab6806ed10511f3658e4687 SHA-256: 975cbe45481997d2465ca6c24c5a3cb339cb2d6246b0fbf524cf75b9f7bf1f66
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF was flagged by a machine learning classifier as malicious. Static analysis revealed a PDF SEO link farm containing 32 external links, predominantly to book-related PDFs hosted on loaminoo.linkpc.net. While the URLs themselves are currently marked as benign, the sheer volume and nature of the links suggest a malicious intent, likely to manipulate search engine results or distribute unwanted content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo
    • http://loaminoo.linkpc.net/3095092099097093/Seventh-Mark---Part-1-Hidden-Secrets-1-1-by-W-J-May.pdf
    • http://loaminoo.linkpc.net/1095096098099096/Stiger-Tales-of-the-Seventh-Part-1-by-Marc-Alan-Edelheit.pdf
    • http://loaminoo.linkpc.net/3099090098092092/Hidden-Secrets-by-Cait-London.pdf
    • http://loaminoo.linkpc.net/4094099097093096/Keeper-part-1-Hidden-Bloodlines-1-by-Tiffany-Evans.pdf
    • http://loaminoo.linkpc.net/2099093090095090/Hidden-Earth-Volume-1-Maycly-Part-1-Two-Altered-Worlds-by-Janet-Beasley.pdf
    • http://loaminoo.linkpc.net/2092099096096097/The-Book-of-Secrets-Unlocking-the-Hidden-Dimensions-of-Your-Life-by-Deepak-Chopra.pdf
    • http://loaminoo.linkpc.net/3090098097094093/The-Hidden-Stairs-and-the-Magic-Carpet-The-Secrets-of-Droon-1-by-Tony-Abbott.pdf
    • http://loaminoo.linkpc.net/1099096091097094/Hidden-Trump-Bite-Back-2-by-Mark-Henwick.pdf
    • http://loaminoo.linkpc.net/7096095094095092/Secrets-of-the-Tomb-Skull-and-Bones-the-Ivy-League-and-the-Hidden-Paths-of-Power-by-Alexandra-Robbins.pdf
    • http://loaminoo.linkpc.net/3093098099098091/Our-Dirty-Little-Secrets-I-Know-What-You-re-Doing---Part-2-by-Zane-Michaelson.pdf
    • http://loaminoo.linkpc.net/1094091092094098/Secrets-of-the-Lost-Mode-of-Prayer-The-Hidden-Power-of-Beauty-Blessings-Wisdom-and-Hurt-by-Gregg-Braden.pdf
    • http://loaminoo.linkpc.net/6099097096096099/The-Protege-Part-I-by-Mark--Williams.pdf
    • http://loaminoo.linkpc.net/2095091092094098/Beneath-the-Secrets-Part-4-Tall-Dark-amp-Deadly-3-4-by-Lisa-Renee-Jones.pdf
    • http://loaminoo.linkpc.net/4092091096099090/Seventh-Dimension-The-Door-Seventh-Dimension-1-by-Lorilyn-Roberts.pdf
    • http://loaminoo.linkpc.net/6093096098098091/Entrapments-Incorrigible-Secrets-Past-amp-Present-Part-One-The-Staves-of-Warrant-1-by-Morgen-Rich.pdf
    • http://loaminoo.linkpc.net/5094097093091/Tesoro-Secrets-of-the-Hidden-Treasure-The-Tesoro-Series-1-by-Andrea-Hintz.pdf
    • http://loaminoo.linkpc.net/7094092095096096/Hidden-in-Plain-Sight-Serenity-s-Plain-Secrets-4-by-Karen-Ann-Hopkins.pdf
    • http://loaminoo.linkpc.net/3095098095093095/Hollow-Shell-A-Zombie-Epic---Part-One-by-Mark-C-Scioneaux.pdf
    • http://loaminoo.linkpc.net/4091094090091093/Do-It-Tomorrow-and-Other-Secrets-of-Time-Management-by-Mark-Forster.pdf
    • http://loaminoo.linkpc.net/7095090091092092/Bouvier-des-Flandres-Training-Secrets-by-Mark-Mendoza.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.