Malicious PDF — malware analysis report

Static analysis result for SHA-256 a94efb6b54ce0028…

MALICIOUS

PDF

15.8 KB Created: 2019-04-30 19:13:27 +01:00 Authoring application: mPDF 5.7
MD5: 07cab4d7c1641ecef7951ee36ffdc2eb SHA-1: 083e1a912f8028c4da90953264fd2077a764af3b SHA-256: a94efb6b54ce002876d17d3dca248a412a9c6db0e81dc4601b1e271299e348c7
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of external links, identified by the PDF_SEO_LINK_FARM heuristic. While the URLs themselves are currently marked as benign, the sheer volume and structure suggest a malicious intent, likely to manipulate search engine results or redirect users to potentially harmful sites. The ML_NYX_PDF_MALICIOUS heuristic further supports the malicious classification.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/5094090095091097/Bleed-Blister-Puke-and-Purge-The-Dirty-Secrets-Behind-Early-American-Medicine-by-J-Marin-Younker.pdf
    • http://loaminoo.linkpc.net/4094094099091094/Aura-by-M-A-Abraham.pdf
    • http://loaminoo.linkpc.net/4094091097098098/Aura-by-Rebecca-Talley.pdf
    • http://loaminoo.linkpc.net/5090091099097095/Aura-by-Rebecca-Talley.pdf
    • http://loaminoo.linkpc.net/5099098091096092/Widower-s-Aura-St-Fleur-1-by-A-J-Renee.pdf
    • http://loaminoo.linkpc.net/1092094096097096/The-Vessel-White-Aura-2-by-Felicia-Tatum.pdf
    • http://loaminoo.linkpc.net/2090091099093096/Flax-s-Pursuit-Aura-2-by-Angel-Martinez.pdf
    • http://loaminoo.linkpc.net/9094094096092098/Tracy-Beaker-s-Thumping-Heart-Tracy-Beaker-4-by-Jacqueline-Wilson.pdf
    • http://loaminoo.linkpc.net/1091097094091092093/Aura-Soma-Healing-Through-Color-Plant-and-Crystal-Energy-by-Irene-Dalichow.pdf
    • http://loaminoo.linkpc.net/5092094097096090/Prol-gom-nes-toute-m-taphysique-future-qui-aura-le-droit-se-pr-senter-comme-science-by-Immanuel-Kant.pdf
    • http://loaminoo.linkpc.net/9096099094093/My-Coloring-Book-A-Complete-Guide-to-Learning-Powerful-Secrets-of-Aura-Colors-and-How-to-Apply-Them-to-your-Everyday-Life-by-Alicia-Schlier.pdf
    • http://loaminoo.linkpc.net/3097096091098094/Always-Been-You-by-Tracy-Luu.pdf
    • http://loaminoo.linkpc.net/4099093095097090/Bug-by-Tracy-Letts.pdf
    • http://loaminoo.linkpc.net/9098094095096/Madman-by-Tracy-Groot.pdf
    • http://loaminoo.linkpc.net/4093092099096/What-She-Left-Behind-by-Tracy-Bilen.pdf
    • http://loaminoo.linkpc.net/1094090098094096/The-Hopeful-by-Tracy-O-39-Neill.pdf
    • http://loaminoo.linkpc.net/5090097093090099/The-Conqueror-by-Tracy-L-Ranson.pdf
    • http://loaminoo.linkpc.net/2091099095093/House-by-Tracy-Kidder.pdf
    • http://loaminoo.linkpc.net/9098091099092093/Flirt-by-Tracy-Brown.pdf
    • http://loaminoo.linkpc.net/3090096094092/I-Kill-Me-by-Tracy-H-Tucker.pdf
    • http://loaminoo.linkpc.net/1091097094091092093/Aura-Soma-Healing-Through-Color-Plant-and-Crystal-Energy-by-Irene-Dalicho

Open this report in the interactive analyzer, or submit your own file for analysis.