Malicious PDF — malware analysis report

Static analysis result for SHA-256 98f757e536d191ba…

MALICIOUS

PDF

21.0 KB Created: 2019-05-02 17:46:05 +01:00 Authoring application: mPDF 5.7
MD5: 2395951a0addda93c476897b51e16a43 SHA-1: 7168c3b90b227f39c580567300810035729e63e6 SHA-256: 98f757e536d191ba1890c89a683044285f828ed0d68088ff0b5fe971dac505c1
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF document was flagged by a machine learning classifier and contains a large number of external links, many of which point to PDFs hosted on the domain 'unieoooq.linkpc.net'. This behavior is indicative of a link farm or a lure to download further content. While the specific intent beyond linking is unclear due to the lack of executable scripts, the sheer volume of links suggests a malicious attempt to direct users to potentially harmful content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9942

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://unieoooq.linkpc.net/24e74e14e54e34e0/Genesis-in-Space-and-Time-The-Flow-of-Biblical-History-by-Francis-A-Schaeffer.pdf
    • http://unieoooq.linkpc.net/64e94e64e14e7/The-Francis-A-Schaeffer-Trilogy-The-3-Essential-Books-in-1-Volume-the-God-Who-Is-There-Escape-from-Reason-He-Is-There-and-He-Is-Not-Silent-by-Francis-A-Schaeffer.pdf
    • http://unieoooq.linkpc.net/34e64e14e54e54e3/The-Complete-Works-of-Francis-A-Schaeffer-A-Christian-Worldview-5-Volume-Set-by-Francis-A-Schaeffer.pdf
    • http://unieoooq.linkpc.net/14e04e24e04e14e3/The-Tapestry-The-Life-and-Times-of-Francis-and-Edith-Schaeffer-by-Edith-Schaeffer.pdf
    • http://unieoooq.linkpc.net/84e14e14e44e3/The-God-Who-Is-There-by-Francis-A-Schaeffer.pdf
    • http://unieoooq.linkpc.net/14e44e04e24e94e5/He-Is-There-and-He-Is-Not-Silent-by-Francis-A-Schaeffer.pdf
    • http://unieoooq.linkpc.net/44e24e44e14e64e6/Pollution-amp-the-Death-of-Man-by-Francis-A-Schaeffer.pdf
    • http://unieoooq.linkpc.net/84e04e74e44e7/A-Christian-Manifesto-by-Francis-A-Schaeffer.pdf
    • http://unieoooq.linkpc.net/24e74e14e34e04e7/Back-To-Freedom-And-Dignity-by-Francis-A-Schaeffer.pdf
    • http://unieoooq.linkpc.net/54e14e44e14e04e3/Francis-Schaeffer-and-the-Shaping-of-Evangelical-America-by-Barry-Hankins.pdf
    • http://unieoooq.linkpc.net/44e14e34e74e7/How-Should-We-Then-Live-The-Rise-and-Decline-of-Western-Thought-and-Culture-by-Francis-A-Schaeffer.pdf
    • http://unieoooq.linkpc.net/24e74e14e14e14e0/A-Time-For-Anger-The-Myth-Of-Neutrality-by-Frank-Schaeffer.pdf
    • http://unieoooq.linkpc.net/74e34e14e64e74e1/Architecture-Form-Space-amp-Order-by-Francis-D-K-Ching.pdf
    • http://unieoooq.linkpc.net/34e64e34e94e54e1/NIV-Archaeological-Study-Bible-An-Illustrated-Walk-Through-Biblical-History-and-Culture-by-Anonymous.pdf
    • http://unieoooq.linkpc.net/74e94e64e54e14e0/Jit-Implementation-Manual----The-Complete-Guide-to-Just-In-Time-Manufacturing-Volume-3----Flow-Manufacturing----Multi-Process-Operations-and-Kanban-by-Hiroyuki-Hirano.pdf
    • http://unieoooq.linkpc.net/64e24e84e84e14e6/Cycles-of-Salvation-History-Genesis-the-Flood-and-Marian-Apparitions-by-Ulrich-Utiger.pdf
    • http://unieoooq.linkpc.net/44e74e44e84e44e2/The-Genesis-Question-Scientific-Advances-and-the-Accuracy-of-Genesis-by-Hugh-Ross.pdf
    • http://unieoooq.linkpc.net/34e64e24e04e24e3/Creation-and-Time-A-Biblical-and-Scientific-Perspective-on-the-Creation-Date-Controversy-by-Hugh-Ross.pdf
    • http://unieoooq.linkpc.net/24e14e44e04e04e4/Once-Upon-A-Time-In-Space-by-Heather-Massey.pdf
    • http://unieoooq.linkpc.net/14e64e14e64e24e7/Another-Space-in-Time-by-Richard-Bunning.pdf