Malicious PDF — malware analysis report

Static analysis result for SHA-256 a2d1b9675737e3b6…

MALICIOUS

PDF

23.0 KB Created: 2019-04-30 03:56:40 +01:00 Authoring application: mPDF 5.7
MD5: cf51c9b22c9774e4116c5cad6b16b0a9 SHA-1: 657b56f7628a5924a59b0281efca2e1470727cfd SHA-256: a2d1b9675737e3b64313d6cd01b23399ea9891a152a4e82e30f2bfd030cdff8c
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 User Execution: Malicious File

The PDF file contains a large number of embedded links to external PDF documents, a technique often used for SEO manipulation or to distribute malicious content. The ML classifier strongly indicated maliciousness, and the PDF_SEO_LINK_FARM heuristic identified a link farm with 28 external links. While the URLs themselves are currently marked as benign, the sheer volume and the heuristic firing suggest a malicious intent to redirect users to potentially harmful content.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9901

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1090097091096093/Elsewhere-An-Anthology-of-Incredible-Places-by-Michael-Barry.pdf
    • http://loaminoo.linkpc.net/2092096090094/Great-Britain-s-Royal-Tombs-A-Guide-to-the-Lives-amp-Burial-Places-of-British-Monarchs-by-Michael-Thomas-Barry.pdf
    • http://loaminoo.linkpc.net/1095093095099091/The-Map-of-True-Places-by-Brunonia-Barry.pdf
    • http://loaminoo.linkpc.net/1099096098099091/Incredible-Turtles-Fun-Animal-Books-For-Kids-With-Facts-amp-Incredible-Photos-Exploring-Our-Incredible-World-Series-1-by-Mark-Smith.pdf
    • http://loaminoo.linkpc.net/3091097098094099/Incredible-Snakes-Fun-Animal-Books-for-Kids-With-Facts-amp-Incredible-Photos-Exploring-Our-Incredible-World-Children-s-Book-Series-by-Mark-Smith.pdf
    • http://loaminoo.linkpc.net/3096091095098092/Barry-Trotter-and-the-Shameless-Parody-Barry-Trotter-1-by-Michael-Gerber.pdf
    • http://loaminoo.linkpc.net/2097095097093/Miss-Smith-s-Incredible-Storybook-by-Michael-Garland.pdf
    • http://loaminoo.linkpc.net/1094093096090098/Fatal-Forecast-An-Incredible-True-Tale-of-Disaster-and-Survival-at-Sea-by-Michael-J-Tougias.pdf
    • http://loaminoo.linkpc.net/1098095094092091/Fatal-Forecast-An-Incredible-True-Tale-of-Disaster-and-Survival-at-Sea-by-Michael-J-Tougias.pdf
    • http://loaminoo.linkpc.net/1091091093094093098/The-Volunteer-The-Incredible-True-Story-of-an-Israeli-Spy-on-the-Trail-of-International-Terrorists-by-Michael-Ross.pdf
    • http://loaminoo.linkpc.net/1090099098092090095/Against-All-Odds-Ten-Historical-Figures-Who-Overcame-Incredible-Adversity-From-William-the-Bastard-to-Winston-Churchill-by-Michael-Rank.pdf
    • http://loaminoo.linkpc.net/7095093092094099/Barry-Trotter-Boxed-Set-by-Michael-Gerber.pdf
    • http://loaminoo.linkpc.net/6094099090091094/Barry-Trotter-And-The-Unnecessary-Sequel-by-Michael-Gerber.pdf
    • http://loaminoo.linkpc.net/3094091095095097/Strangers-in-High-Places-The-Story-of-the-Great-Smoky-Mountains-by-Michael-Frome.pdf
    • http://loaminoo.linkpc.net/2092098093098095/How-to-Save-Your-Own-Life-15-Lessons-on-Finding-Hope-in-Unexpected-Places-by-Michael-Gates-Gill.pdf
    • http://loaminoo.linkpc.net/1091095097099097093/The-Prose-Poem-An-International-Anthology-by-Michael-Benedikt.pdf
    • http://loaminoo.linkpc.net/4096098091099092/In-The-Strangest-Places-Strange-Places-1-by-Willa-Okati.pdf
    • http://loaminoo.linkpc.net/3090092099091/Fade-to-Black-Graveside-Memories-of-Hollywood-Greats-1927-1950-by-Michael-Thomas-Barry.pdf
    • http://loaminoo.linkpc.net/3095090090092/Practicing-Angels-A-Contemporary-Anthology-of-San-Francisco-Bay-Area-Poetry-by-Michael-Mayo.pdf
    • http://loaminoo.linkpc.net/6092091090095097/The-Last-Half-Hour-of-the-Day-An-Anthology-of-Stories-and-Essays-That-Have-Inspired-Physicians-by-Michael-A-LaCombe.pdf
    • http://loaminoo.linkpc.net/3091097098094099/Incredible-Snakes-Fun-Animal-Books-for-Kids-With-Facts-amp-Incredible-Photos-Exploring-Our-Incredible-World-Children-s-Book-Series-by-M

Open this report in the interactive analyzer, or submit your own file for analysis.