Malicious PDF — malware analysis report

Static analysis result for SHA-256 9dbd1bf383b7aea6…

MALICIOUS

PDF

15.1 KB Created: 2019-04-30 08:59:46 +01:00 Authoring application: mPDF 5.7
MD5: cc71e3f8dfab0381776660449e97aa36 SHA-1: 98f9400aa143e625d2bb573adc2846bf333e0ffc SHA-256: 9dbd1bf383b7aea6c4619bf92f02d07c426cf5841dbc40e30eabda6851e1a32c
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified as a link farm. The ML classifier strongly suggests maliciousness. While the URLs themselves are currently flagged as benign, the sheer volume and the heuristic firing indicate a likely attempt to direct users to potentially malicious content or for SEO manipulation. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4099096091097095/Perfect-Plans-Perfect-Plans-1-by-C-J-Wells.pdf
    • http://loaminoo.linkpc.net/1094096093093094/Take-a-Bow-Perfect-Plans-2-by-C-J-Wells.pdf
    • http://loaminoo.linkpc.net/7090095096096093/Best-Laid-Plans-Box-Set-Best-Laid-Plans-1-2-by-Robyn-Kelly.pdf
    • http://loaminoo.linkpc.net/1094095093091094/A-Perfect-Mistake-Hope-Parish-2-A-Perfect-Secret-2-by-Zoe-Dawson.pdf
    • http://loaminoo.linkpc.net/2091092096097093/A-Place-Called-Perfect-Perfect-1-by-Helena-Duggan.pdf
    • http://loaminoo.linkpc.net/3096096095093093/In-Just-that-Perfect-Moment-The-Perfect-World-2-by-Samantha-L-Hardison.pdf
    • http://loaminoo.linkpc.net/4092097090094094/Perfect-I-m-Not-Boomer-on-Beer-Brawls-Backaches-and-Baseball-by-David-Wells.pdf
    • http://loaminoo.linkpc.net/1093095099092094/Too-Perfect-Perfect-Trilogy-3-by-Julie-Ortolon.pdf
    • http://loaminoo.linkpc.net/3094095099099097/Perfect-Redemption-Perfect-Series-3-by-Claudia-Tan.pdf
    • http://loaminoo.linkpc.net/7090097098090/Present-Perfect-Perfect-1-by-Alison-G-Bailey.pdf
    • http://loaminoo.linkpc.net/2090091092095/Far-from-Perfect-Perfect-Indiana-1-by-Barbara-Longley.pdf
    • http://loaminoo.linkpc.net/1092098092097096/One-Perfect-Summer-One-Perfect-1-by-Paige-Toon.pdf
    • http://loaminoo.linkpc.net/2091091096095095/Present-Perfect-Perfect-1-by-Alison-G-Bailey.pdf
    • http://loaminoo.linkpc.net/9091093094096094/No-Perfect-Destiny-Almost-Perfect-3-by-Jackie-Weger.pdf
    • http://loaminoo.linkpc.net/2097099090093091/Perfect-Murder-Perfect-Town-The-Uncensored-Story-of-the-JonBenet-Murder-and-the-Grand-Jury-s-Search-for-the-Truth-by-Lawrence-Schiller.pdf
    • http://loaminoo.linkpc.net/2098091093090094/A-Perfect-Moment-Perfect-1-by-Becca-Lee.pdf
    • http://loaminoo.linkpc.net/4098091092093096/Big-Plans-by-Bob-Shea.pdf
    • http://loaminoo.linkpc.net/9098095098097099/403-b-Plans-by-Donald-J-Hakala.pdf
    • http://loaminoo.linkpc.net/7090095097093091/Best-Laid-Plans-by-Billy-London.pdf
    • http://loaminoo.linkpc.net/2091091097097097/The-Best-Laid-Plans-by-Sarah-Mayberry.pdf
    • http://loaminoo.linkpc.net/2091091096095095/Present-Perfect-Perfect-1-by-Alison-G

Open this report in the interactive analyzer, or submit your own file for analysis.