Malicious PDF — malware analysis report

Static analysis result for SHA-256 9ffe17c300faeae9…

MALICIOUS

PDF

18.4 KB Created: 2019-04-30 02:52:23 +01:00 Authoring application: mPDF 5.7
MD5: 24065ab3496140d164e59aab43e19545 SHA-1: ee03cb0d3d15c0835e067b9e7ae0b4de5a3e2da9 SHA-256: 9ffe17c300faeae9496a317679cc213d2202ad5483c760248e9df5086a212573
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.001 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of external links, forming a link farm. The ML classifier strongly indicated maliciousness. The primary heuristic identified a link farm with 25 external PDF links, predominantly using numeric slugs, hosted on 'loaminoo.linkpc.net'. This suggests a tactic to distribute malicious content or SEO spam.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9920

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3090093099095093/Stewart-and-Leah-Home-for-Christmas-by-Ruth-Madison.pdf
    • http://loaminoo.linkpc.net/3090093099095092/Stewart-s-Story-by-Ruth-Madison.pdf
    • http://loaminoo.linkpc.net/3097094096092093/One-Christmas-Night-Highland-Christmas-A-Wife-For-Christmas-Ian-s-Gift-by-Ruth-Ryan-Langan.pdf
    • http://loaminoo.linkpc.net/7095095095092/The-Myth-of-You-and-Me-by-Leah-Stewart.pdf
    • http://loaminoo.linkpc.net/2096090096096098/The-History-of-Us-by-Leah-Stewart.pdf
    • http://loaminoo.linkpc.net/1097092098095097/Whole-by-Ruth-Madison.pdf
    • http://loaminoo.linkpc.net/2092095091092099/A-Bride-By-Christmas-Home-For-Christmas-The-Wise-Virgin-Tumbleweed-Christmas-by-Heather-Graham.pdf
    • http://loaminoo.linkpc.net/3096098097097091/Madison-s-Gift-Five-Partnerships-That-Built-America-by-David-O-Stewart.pdf
    • http://loaminoo.linkpc.net/4098092097091093/Blood-Dreamer-Obleignia-Chronicles-1-by-Madison-Ruth.pdf
    • http://loaminoo.linkpc.net/6096097095099096/KATO-S-CHRISTMAS-BRIDE-by-Cia-Leah.pdf
    • http://loaminoo.linkpc.net/3098094092091093/Madison-s-Christmas-by-Carol-Ann-Kauffman.pdf
    • http://loaminoo.linkpc.net/2091090099093097/12-Daves-Of-Christmas-by-Juliet-Madison.pdf
    • http://loaminoo.linkpc.net/2099096097090093/Home-For-Christmas-Bar-V5-Dude-Ranch-1-Copper-Mountain-Christmas-2-by-Melissa-McClone.pdf
    • http://loaminoo.linkpc.net/5090092090097095/Christmas-is-Coming-with-Ruth-J-Morehead-s-Holly-Babes-by-Ruth-J-Morehead.pdf
    • http://loaminoo.linkpc.net/5090090091096097/I-ll-Be-Home-for-Christmas-Silver-Bells-On-a-Snowy-Christmas-The-Perfect-Holiday-by-Debbie-Macomber.pdf
    • http://loaminoo.linkpc.net/3090096097090098/I-ll-Be-Home-For-Christmas-Coming-Home-0-5-by-Jessica-Scott.pdf
    • http://loaminoo.linkpc.net/2099094097095098/Star-Wreck-V-The-Undiscovered-Nursing-Home-by-Leah-Rewolinski.pdf
    • http://loaminoo.linkpc.net/2090094091098097/Dirty-River-A-Queer-Femme-of-Color-Dreaming-Her-Way-Home-by-Leah-Lakshmi-Piepzna-Samarasinha.pdf
    • http://loaminoo.linkpc.net/4097096093098099/Blood-Rites-of-the-Bourgeoisie-by-Stewart-Home.pdf
    • http://loaminoo.linkpc.net/5095092091095096/Christmas-with-You-Stewart-Island-4-by-Tracey-Alvarez.pdf
    • http://loaminoo.linkpc.net/30

Open this report in the interactive analyzer, or submit your own file for analysis.