Malicious PDF — malware analysis report

Static analysis result for SHA-256 9d3559084441da64…

MALICIOUS

PDF

28.4 KB Created: 2019-04-30 04:20:05 +01:00 Authoring application: mPDF 5.7
MD5: d5f51dd967b739ca80e00d5619266abb SHA-1: 14fcab0907b6d62a20dd2322613ee2b71de01d45 SHA-256: 9d3559084441da64b574a09ba212be4aa3375fe20cc7bccbab2ba146e55b6b3a
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF file contains a large number of embedded links pointing to external PDFs on the domain 'loaminoo.linkpc.net'. This heuristic firing, combined with the ML classifier's high confidence, suggests a link-farming or redirection attack. The document body was not sufficiently readable to determine a specific lure, but the sheer volume of links indicates an attempt to drive traffic to potentially malicious or unwanted content. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090093093096092098/Schlaf-gut-kleiner-Wolf-Sov-gott-lilla-vargen-Zweisprachiges-Kinderbuch-Deutsch-Schwedisch-www-childrens-books-bilingual-com-by-Ulrich-Renz.pdf
    • http://loaminoo.linkpc.net/1090095093093094092/Zweisprachiges-Kinderbuch-in-Deutsch-und-Spanisch---Cham-leon---Camale-n-by-LingoLibros.pdf
    • http://loaminoo.linkpc.net/1090095093093095091/Zweisprachiges-Kinderbuch-in-Deutsch-und-T-rkisch-Cham-leon---Bukalemun---Die-Serie-zum-T-rkisch-Lernen-by-LingoLibros.pdf
    • http://loaminoo.linkpc.net/1090095093093094099/Zweisprachiges-Kinderbuch-in-Deutsch-und-Franz-sisch-Cham-leon---Cam-l-on-Mit-Spa-Franz-sisch-lernen-5-by-Colin-Hann.pdf
    • http://loaminoo.linkpc.net/1090095093093094094/Zweisprachiges-Kinderbuch-in-Deutsch-und-Spanisch-Cham-leon---Camale-n-Mit-Spa-Spanisch-lernen-5-by-Pedro-P-ramo.pdf
    • http://loaminoo.linkpc.net/1090093098094095091/Schlaf-gut-kleiner-Regenbogenfisch-by-Marcus-Pfister.pdf
    • http://loaminoo.linkpc.net/1090093093096093092/Da-rein-da-raus-In-h-r-ut-d-r-Bilderbuch-Deutsch-Schwedisch-by-Philipp-Winterberg.pdf
    • http://loaminoo.linkpc.net/1090093093095095090/Grundwortschatz-Deutsch---Schwedisch-Die-wichtigsten-3-000-W-rter-Thematisch-sortiert-by-Line-Nygren.pdf
    • http://loaminoo.linkpc.net/1090093093096093090/Still-wie-Licht-in-windloser-Gegend-Lyrik-aus-Finnland-eine-Anthologie-in-Finnisch-Schwedisch-und-Deutsch-by-Ingrid-Schellbach-Kobra.pdf
    • http://loaminoo.linkpc.net/9095097093093097/Wen-Gott-gl-cklich-nennt-Deutsch-by-Petra-Schaadt.pdf
    • http://loaminoo.linkpc.net/1090090091091090094/Childrens-Books-Josefine-by-Jasmin-B-Pront.pdf
    • http://loaminoo.linkpc.net/5095096091092097/Great-Expectations-Gro-e-Erwartungen---zweisprachig-Englisch-Deutsch-Bilingual-English-German-Edition-by-Charles-Dickens.pdf
    • http://loaminoo.linkpc.net/1091099094096093094/Alles-Fuer-Einen-Traum-amp-One-Dream-Only-Zweisprachige-Ausgabe-Englisch-Deutsch-Bilingual-Book-English-German-by-Elodie-Nowodazkij.pdf
    • http://loaminoo.linkpc.net/1090095093099097094/Die-kleine-Meerjungfrau---The-Little-Mermaid-Illustriertes-M-rchen-zum-Lesen-und-Vorlesen---zweisprachig-deutsch-englisch---bilingual-German-English-by-Hans-Christian-Andersen.pdf
    • http://loaminoo.linkpc.net/8098098093090095/Rotk-ppchen-M-rchen-Malbuch-Little-Red-Riding-Hood-Fairy-Tale-and-Coloring-Pages-Zweisprachig-in-Deutsch-und-Englisch-Bilingual-German---English-Book-for-Kids-by-Charles-Perrault.pdf
    • http://loaminoo.linkpc.net/9095093090093098/Gott-ist-nicht-tot-Warum-alles-daf-r-spricht-dass-es-Gott-gibt-by-Rice-Broocks.pdf
    • http://loaminoo.linkpc.net/9097099098091090/Household-Tales-and-Childrens-Legends-Household-Tales-and-Childrens-Legends-German-Learning-Edition-by-Jacob-Grimm.pdf
    • http://loaminoo.linkpc.net/9093098091099095/Dr-Gott-s-No-Flour-No-Sugar-Diet-by-Peter-Gott.pdf
    • http://loaminoo.linkpc.net/9093098091092098/Dr-Gott-s-No-Flour-No-Sugar-Diet-by-Peter-H-Gott.pdf
    • http://loaminoo.linkpc.net/1091092091093092091/Gott-hnlichkeit-Verg-ttlichung-Und-Erh-hung-Zu-Seligem-Leben-Untersuchungen-Zur-Herkunft-Der-Platonischen-Angleichung-an-Gott-by-Dietrich-Roloff.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.