Malicious PDF — malware analysis report

Static analysis result for SHA-256 a2d8965e7a57f11b…

MALICIOUS

PDF

14.5 KB Created: 2019-04-30 17:36:08 +01:00 Authoring application: mPDF 5.7
MD5: 25e14c8a301634c96a804f13c4b23b7f SHA-1: 9254052b416f8852a16c5ec1c8b0a4c9ebc8f6f8 SHA-256: a2d8965e7a57f11b41316704dd91bb93ea14762d507aaa5416984f755fffcb06
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment

The PDF contains a large number of embedded links to external PDFs, hosted on the domain 'loaminoo.linkpc.net'. This behavior is indicative of a link farm or a phishing lure, aiming to direct users to potentially malicious content. The ML classifier also flagged this PDF as malicious with high confidence.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4090091099092098/The-Little-Broomstick-by-Mary-Stewart.pdf
    • http://loaminoo.linkpc.net/2097097095098094/Broomstick-Breakdown-by-Eve-Langlais.pdf
    • http://loaminoo.linkpc.net/6096096097099/Bedknob-and-Broomstick-by-Mary-Norton.pdf
    • http://loaminoo.linkpc.net/1090090098096099091/Beyond-the-Broomstick-Thoughts-on-the-Philosophy-of-Wicca-by-Morgana-Sythove.pdf
    • http://loaminoo.linkpc.net/3098090095095095/The-Marshall-Plan-for-Novel-Writing-by-Evan-Marshall.pdf
    • http://loaminoo.linkpc.net/8092096091093/The-Prayers-of-Peter-Marshall-by-Catherine-Marshall.pdf
    • http://loaminoo.linkpc.net/5091091091093098/Marshall-s-Law-Marshall-Grade-2-by-Ben-Sanders.pdf
    • http://loaminoo.linkpc.net/3096094097090097/The-Collected-Works-of-Catherine-Marshall-To-Live-Again-and-Beyond-Our-Selves-by-Catherine-Marshall.pdf
    • http://loaminoo.linkpc.net/4097095094099/A-Man-Called-Peter-The-Story-of-Peter-Marshall-by-Catherine-Marshall.pdf
    • http://loaminoo.linkpc.net/3090097099097099/Legends-of-the-Dark-Knight-Marshall-Rogers-by-Marshall-Rogers.pdf
    • http://loaminoo.linkpc.net/5090099090095091/The-Complete-Stories-of-Alan-Marshall-by-Alan-Marshall.pdf
    • http://loaminoo.linkpc.net/5099096098097096/Catherine-Marshall-s-Story-Bible-by-Catherine-Marshall.pdf
    • http://loaminoo.linkpc.net/3094091091097096/To-Get-to-You-by-Joanne-Bischof.pdf
    • http://loaminoo.linkpc.net/7095091093091095/Go-Go-Go-ABC-by-Joanne-Belgrave.pdf
    • http://loaminoo.linkpc.net/6093098090098097/Ivanhoe-by-Joanne-Fink.pdf
    • http://loaminoo.linkpc.net/3099094092092094/Colinthology-by-Joanne-Hall.pdf
    • http://loaminoo.linkpc.net/1095094090098093/Contagion-by-Joanne-Dahme.pdf
    • http://loaminoo.linkpc.net/9090096094090094/I-Say-Shehechiyanu-by-Joanne-Rockling.pdf
    • http://loaminoo.linkpc.net/1091093094098097093/One-Direction-by-Joanne-Mattern.pdf
    • http://loaminoo.linkpc.net/2092093094099090/Red-Skies-by-Joanne-Kells.pdf
    • http://loaminoo.linkpc.net/5090099090095091/The-Comple

Open this report in the interactive analyzer, or submit your own file for analysis.