Malicious PDF — malware analysis report

Static analysis result for SHA-256 a3934ee896cf25db…

MALICIOUS

PDF

16.2 KB Created: 2019-05-01 17:06:45 +01:00 Authoring application: mPDF 5.7
MD5: ee8abc530666d8fe7e0c06fb8834deea SHA-1: dc13b2f4fb86835606668c7305ce7a92f9a54300 SHA-256: a3934ee896cf25db9eea94c9349a71feca0367bcb4a55774cb80a3261eb6ba6e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF document was flagged by a machine learning classifier as malicious. It contains a large number of embedded links, identified as a PDF SEO link farm, pointing to various PDF files hosted on loaminoo.linkpc.net. While the URLs themselves are currently marked as confirmed benign, the sheer volume and structure suggest a malicious intent, likely to distribute further malware or engage in phishing. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9898

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/9096094097091090/A-Blue-Star-Rising-The-Adventures-of-Blue-Faust-5-by-Cecilia-Randell.pdf
    • http://loaminoo.linkpc.net/3094090090094/The-Rising-Blue-River-Chronicles-1-by-C-M-Meridian.pdf
    • http://loaminoo.linkpc.net/4094095092096092/Blue-Moon-Rising-The-Patroness-1-by-Natalie-Herzer.pdf
    • http://loaminoo.linkpc.net/3095098095093099/Blue-Moon-Rising-Morrigan-2-by-Amanda-McKeon.pdf
    • http://loaminoo.linkpc.net/4097097098095096/The-Blue-Star-by-Fletcher-Pratt.pdf
    • http://loaminoo.linkpc.net/3097095098095092/The-Blue-Star-by-Fletcher-Pratt.pdf
    • http://loaminoo.linkpc.net/2090090093091093/Midnight-Blue-Sonja-Blue-Collection-by-Nancy-A-Collins.pdf
    • http://loaminoo.linkpc.net/3094090090090093/Black-amp-Blue-Detective-Harriet-Blue-0-5-by-James-Patterson.pdf
    • http://loaminoo.linkpc.net/3098093090091098/Threads-of-Blue-Beautiful-Blue-World-2-by-Suzanne-LaFleur.pdf
    • http://loaminoo.linkpc.net/3097092098093093/O-Human-Star-Volume-One-by-Blue-Delliquanti.pdf
    • http://loaminoo.linkpc.net/3093097092093/13-Little-Blue-Envelopes-Little-Blue-Envelope-1-by-Maureen-Johnson.pdf
    • http://loaminoo.linkpc.net/3098096093090093/Things-My-Husband-Says-Out-of-the-Blue-1-by-Barbara-Blue.pdf
    • http://loaminoo.linkpc.net/1097094099095095/Blue-Moon-Blue-Crystal-1-by-Pat-Spence.pdf
    • http://loaminoo.linkpc.net/2095090090098090/Bluest-of-Blue-dirtysexygeeks-3-by-Melissa-Blue.pdf
    • http://loaminoo.linkpc.net/1097094094094091/Deep-Blue-Blue-1-by-Jules-Barnard.pdf
    • http://loaminoo.linkpc.net/2097091095099094/True-Blue-Blue-3-by-Jules-Barnard.pdf
    • http://loaminoo.linkpc.net/2090099096094096/Death-Of-A-Blue-Movie-Star-Rune-2-by-Jeffery-Deaver.pdf
    • http://loaminoo.linkpc.net/7091092095098099/Complicated-Blue-The-Extraordinary-Adventure-of-the-Good-Witch-Ana-s-Blue-The-Good-Witch-Ana-s-Blue-1-by-P-J-Whittlesea.pdf
    • http://loaminoo.linkpc.net/3097092093094092/Blue-Moon-Over-Texas-The-Lone-Star-Cowboys-2-by-Tori-Scott.pdf
    • http://loaminoo.linkpc.net/3090093092093094/The-Adventure-of-the-Blue-Carbuncle-The-Adventures-of-Sherlock-Holmes-7-by-Arthur-Conan-Doyle.pdf
    • http://loaminoo.linkpc.net/3098096093090093/Things-My-Husband-Says-Out-of-the-Blue-1-by-

Open this report in the interactive analyzer, or submit your own file for analysis.