Malicious PDF — malware analysis report

Static analysis result for SHA-256 98f7644bd0880d21…

MALICIOUS

PDF

26.9 KB Created: 2019-05-02 05:03:41 +01:00 Authoring application: mPDF 5.7
MD5: 335dbcb104ce2bb27e7fd12532554a00 SHA-1: a563a525e3e70f89d817e9288716cc56f1299bcc SHA-256: 98f7644bd0880d216a096b98d8c957ba0c7a41e7fe8a1e43ef111c85d4253247
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF was flagged by a critical heuristic for containing a mass external PDF link farm, with 32 links pointing to a dynamic DNS domain. The ML classifier also strongly indicated maliciousness. While no scripts were extracted, the document's structure and embedded links suggest a campaign to drive traffic to numerous external PDFs, likely for SEO poisoning or to host malicious content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090096095097097093/Spark-Joy-Eine-illustrierte-Meisterklasse-in-der-Kunst-der-Organisation-von-Marie-Kondo-Zusammenfassung-amp-Highlights-by-Die-Essenz.pdf
    • http://loaminoo.linkpc.net/1090096095097097092/Spark-Joy-Eine-Illustrierte-Meisterklasse-in-Der-Kunst-Der-Organisation-Von-Marie-Kondo---Zusammenfassung-amp-Highlights-by-Die-Essenz.pdf
    • http://loaminoo.linkpc.net/9092097096094090/Spark-Joy-Een-ge-llustreerde-masterclass-in-de-kunst-van-het-opruimen-by-Marie-Kond-.pdf
    • http://loaminoo.linkpc.net/1090096095097097090/Was-ich-noch-sagen-wollte-von-Helmut-Schmidt-Zusammenfassung-und-Highlights-by-Die-Essenz.pdf
    • http://loaminoo.linkpc.net/9095096090090095/Der-Spaziergang-in-Der-Kunst-Eine-Untersuchung-Des-Motives-in-Der-Kunst-Des-18-Und-19-Jahrhunderts-by-Sabine-Krebber.pdf
    • http://loaminoo.linkpc.net/5095091093094097/Le-pouvoir-tonnant-du-rangement-D-sencombrer-sa-maison-pour-all-ger-sa-vie-by-Marie-Kond-.pdf
    • http://loaminoo.linkpc.net/3098093092097/The-Life-Changing-Magic-of-Tidying-Up-The-Japanese-Art-of-Decluttering-and-Organizing-by-Marie-Kond-.pdf
    • http://loaminoo.linkpc.net/9094094090099092/The-Summary-of-The-Life-Changing-Magic-of-Tyding-Up-Based-on-the-Book-by-Marie-Kondo-The-Japanese-Art-of-Decluttering-and-Organizing-by-Goldmine-Reads.pdf
    • http://loaminoo.linkpc.net/4097090098091092/Spark-Stronger-3-by-Jay-Marie.pdf
    • http://loaminoo.linkpc.net/2093094099096099/That-Certain-Spark-Only-in-Gooding-4-by-Cathy-Marie-Hake.pdf
    • http://loaminoo.linkpc.net/1090098092092098098/Spazierg-nge-in-Wien-1-Die-Highlights-der-Innenstadt-Graben-Kohlmarkt-Hofburg-Neuer-MarktDie-Highlights-der-Innenstadt-by-Merian.pdf
    • http://loaminoo.linkpc.net/9093093093091090/Martellis-Untergewicht-Eine-Leichtigkeit-Roman-by-Thomas-Kunst.pdf
    • http://loaminoo.linkpc.net/1091095097095091094/Die-Wahrnehmung-Von-Korperlichkeit-in-Kunstwerken-Eine-Interdisziplinare-Untersuchung-Zur-Funktion-Von-Kunst-by-Aline-Vedder.pdf
    • http://loaminoo.linkpc.net/8099099099094098/Sinti-und-Roma-h-ren-Eine-musikalisch-illustrierte-Reise-durch-die-Kulturgeschichte-der-Sinti-und-Roma-von-den-Anf-ngen-bis-in-die-Gegenwart-by-Anja-Tuckermann.pdf
    • http://loaminoo.linkpc.net/9090099098093094/I-Viel-L-rm-Um-Richts-II-Der-Sommernachtstraum-III-Die-Kunst-Eine-B-se-Sieben-Zu-Z-hmen-William-Shakspeare-s-S-mmtliche-Dramatische-Werke-Vol-2-of-12-by-William-Shakespeare.pdf
    • http://loaminoo.linkpc.net/9098097097097091/Spark-Spark-1-by-Brooke-Cumberland.pdf
    • http://loaminoo.linkpc.net/1091099091098092/Spark-Spark-1-by-Brooke-Cumberland.pdf
    • http://loaminoo.linkpc.net/1090092096091096092/End-of-Art---Endings-in-Art-La-Fin-de-L-Art---Les-Fins-Dans-Les-Arts-Ende-Der-Kunst---Enden-in-Der-Kunst-by-Gerhard-Seel.pdf
    • http://loaminoo.linkpc.net/9098098099096093/Treibhaus-Eine-Rosetten-Romanze-by-Marie-R-G-tze.pdf
    • http://loaminoo.linkpc.net/9093098090091095/Sichtbare-Religion-Eine-Einf-hrung-in-Die-Religionswissenschaft-by-Marie-Therese-Mader.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.