Malicious PDF — malware analysis report

Static analysis result for SHA-256 9d2c18784ebb9fae…

MALICIOUS

PDF

14.1 KB Created: 2019-04-30 02:02:22 +01:00 Authoring application: mPDF 5.7
MD5: ec73b812b94af7a4f3b3d6ca2a219188 SHA-1: d24fe1b11a8c4081edea68df03a58a588be60c3d SHA-256: 9d2c18784ebb9faee148e71e08a761ccfe951940597f6b4652d3c404fd078f0e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDF files, hosted on the suspicious domain 'loaminoo.linkpc.net'. This behavior is indicative of a link farm or a redirection scheme designed to lead users to potentially malicious content. The ML classifier also flagged this PDF with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3090091090091094/The-Goblin-King-Shadowlands-1-by-Shona-Husk.pdf
    • http://loaminoo.linkpc.net/1097093096097095/For-the-Love-of-a-Goblin-Warrior-Shadowlands-3-by-Shona-Husk.pdf
    • http://loaminoo.linkpc.net/6091096094098094/Dark-Secrets-Arcane-2-by-Shona-Husk.pdf
    • http://loaminoo.linkpc.net/3098090091096098/Taming-the-Assassin-Court-of-Annwyn-6-by-Shona-Husk.pdf
    • http://loaminoo.linkpc.net/3098092098091094/Singer-of-Death-Court-of-Annwyn-5-by-Shona-Husk.pdf
    • http://loaminoo.linkpc.net/3098093090096092/Lover-in-a-Bottle-In-a-Bottle-3-by-Shona-Husk.pdf
    • http://loaminoo.linkpc.net/4090096099093/Club-Shadowlands-Masters-of-the-Shadowlands-1-by-Cherise-Sinclair.pdf
    • http://loaminoo.linkpc.net/8097093097094097/Club-Shadowlands-Masters-of-the-Shadowlands-1-by-Cherise-Sinclair.pdf
    • http://loaminoo.linkpc.net/6098099099096/The-Goblin-King-The-Kings-4-by-Heather-Killough-Walden.pdf
    • http://loaminoo.linkpc.net/2099094092090099/Greta-and-the-Goblin-King-Mylena-Chronicles-1-by-Chloe-Jacobs.pdf
    • http://loaminoo.linkpc.net/1091098094093097094/--husk-of-Eden-4-Husk-Eden-4-by-Yoshinori-Kisaragi.pdf
    • http://loaminoo.linkpc.net/1094092095090095/Goblin-Hero-Jig-the-Goblin-2-by-Jim-C-Hines.pdf
    • http://loaminoo.linkpc.net/6091097095092/The-Goblin-Wood-Goblin-Wood-1-by-Hilari-Bell.pdf
    • http://loaminoo.linkpc.net/2099095095097097/Mighty-Jack-and-the-Goblin-King-Mighty-Jack-2-by-Ben-Hatke.pdf
    • http://loaminoo.linkpc.net/1099098095090098/Husk-by-Corey-Redekop.pdf
    • http://loaminoo.linkpc.net/3094098092098090/Flame-Tree-Road-by-Shona-Patel.pdf
    • http://loaminoo.linkpc.net/4098094096093099/Song-of-the-Flame-Tree-by-Shona-Patel.pdf
    • http://loaminoo.linkpc.net/5090097095098094/One-Day-Long-Ago-More-Stories-from-a-Shona-Childhood-by-Charles-Mungoshi.pdf
    • http://loaminoo.linkpc.net/8095096096092096/Ashael-Rising-Vessel-of-KalaDene-1-by-Shona-Kinsella.pdf
    • http://loaminoo.linkpc.net/2090090094099094/Shadowlands-by-William-Nicholson.pdf
    • http://loaminoo.linkpc.net/2099094092090099/Greta-and-the-Goblin-King-Mylena-Chronicles-1-by-Chloe-

Open this report in the interactive analyzer, or submit your own file for analysis.