Malicious PDF — malware analysis report

Static analysis result for SHA-256 97f0a2fd6565af6b…

MALICIOUS

PDF

16.6 KB Created: 2019-05-02 17:40:09 +01:00 Authoring application: mPDF 5.7
MD5: 304c0b4fe00d16cd0e4525c2358b9c4b SHA-1: 3f896417840760f1b36d15f4ca88f388221fc63a SHA-256: 97f0a2fd6565af6b111b6ecfe7671614b47205df8c7887d435c13d70f7910620
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded links to external PDFs, as indicated by the PDF_SEO_LINK_FARM heuristic. The ML classifier also flagged this document as malicious with high confidence. The embedded URLs, while labeled as benign in the provided context, are part of a link farm, suggesting a potential attempt to manipulate search engine results or distribute malicious content indirectly. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9913

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc
    • http://loaminoo.linkpc.net/9091093090098090/The-Economics-of-Climate-Change-The-Stern-Review-by-Nicholas-Stern.pdf
    • http://loaminoo.linkpc.net/1096096092097091/A-Blueprint-for-a-Safer-Planet-How-to-Manage-Climate-Change-and-Create-a-New-Era-of-Progress-and-Prosperity-by-Nicholas-Stern.pdf
    • http://loaminoo.linkpc.net/7091093093096090/Climate-Change-and-Energy-Japanese-Perspectives-on-Climate-Change-Mitigation-Strategy-by-Yoichi-Kaya.pdf
    • http://loaminoo.linkpc.net/7095099095096095/The-Great-Climate-Robbery-How-the-Food-System-Drives-Climate-Change-and-What-We-Can-Do-about-It-by-Grain.pdf
    • http://loaminoo.linkpc.net/9095090097098099/Verkauft-by-Sophie-Stern.pdf
    • http://loaminoo.linkpc.net/6097097094096099/Hannelore-Rex-by-Walter-H-Stern.pdf
    • http://loaminoo.linkpc.net/3097095099098099/Stern-The-Man-and-His-Gang-by-Zev-Golan.pdf
    • http://loaminoo.linkpc.net/4098090095091091/Ten-Days-of-Christmas-by-G-B-Stern.pdf
    • http://loaminoo.linkpc.net/5090098092091092/Five-Germanys-I-Have-Known-by-Fritz-Stern.pdf
    • http://loaminoo.linkpc.net/9091093092092098/Beautiful-Battlefields-by-Bo-Stern.pdf
    • http://loaminoo.linkpc.net/3096096094098097/The-Royal-Her-by-Sophie-Stern.pdf
    • http://loaminoo.linkpc.net/8097096091095092/Der-vierte-Stern-by-Katja-Darssen.pdf
    • http://loaminoo.linkpc.net/3096091094096095/The-Rose-Rabbi-by-Daniel-Stern.pdf
    • http://loaminoo.linkpc.net/7094094090097092/Robert-A-M-Stern-by-Architectural-Monograph.pdf
    • http://loaminoo.linkpc.net/3092098093095093/Private-Parts-by-Howard-Stern.pdf
    • http://loaminoo.linkpc.net/2099090097098096/Superman-The-Never-Ending-Battle-by-Roger-Stern.pdf
    • http://loaminoo.linkpc.net/9091093090097097/Paralyzed-Kennedy-Stern-2-by-Alana-Terry.pdf
    • http://loaminoo.linkpc.net/6097096090093091/Liebesfunken-Der-verlorene-Stern-by-Priska-Schmidt.pdf
    • http://loaminoo.linkpc.net/9098098092090093/Marcel-Proust-Swann-s-Way-by-Sheila-Stern.pdf
    • http://loaminoo.linkpc.net/3096094099094095/Yoda-The-Story-of-a-Cat-and-His-Kittens-by-Beth-Stern.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.