Malicious PDF — malware analysis report

Static analysis result for SHA-256 aaa5a911881bd0df…

MALICIOUS

PDF

16.7 KB Created: 2019-04-30 05:25:59 +01:00 Authoring application: mPDF 5.7
MD5: d342930a7add138420a2215c1e082cee SHA-1: 4058857028065e8f4b153a055db3fbb2d20167e1 SHA-256: aaa5a911881bd0df6954aa842120c2f47927780b760ebb62b236ab51ba44881e
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious Link

The PDF contains a large number of embedded URLs, identified as a link farm, which is a common technique for SEO poisoning or redirecting users to malicious sites. The ML classifier also strongly indicated maliciousness. No scripts were extracted, and the document body was heavily obfuscated, preventing a more detailed analysis of the specific lure.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9913

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/7093095094097098/Manny-Khoshbin-s-Contrarian-Playbook-How-to-Build-Your-100-Million-Real-Estate-Portfolio-from-the-Ground-Up-by-Manny-Khoshbin.pdf
    • http://loaminoo.linkpc.net/7093095092099091/Negative-Space-Manny-Farber-on-the-Movies-by-Manny-Farber.pdf
    • http://loaminoo.linkpc.net/6092094098096097/Real-Estate-Treasure-Map-Your-Personal-Guide-to-Real-Estate-Riches-by-Tim-Harris.pdf
    • http://loaminoo.linkpc.net/4091099096090097/Manny-Get-Your-Guy-The-Mannies-2-by-Amy-Lane.pdf
    • http://loaminoo.linkpc.net/2093094094092096/The-Manny-by-Sara-Bell.pdf
    • http://loaminoo.linkpc.net/7093095093090090/Married-to-the-Manny-by-Daisy-May.pdf
    • http://loaminoo.linkpc.net/4094098096091095/And-Manny-Makes-Three-by-Trina-Solet.pdf
    • http://loaminoo.linkpc.net/2093090092095090/The-Manny-Diaries-by-Kilt-Kilpatrick.pdf
    • http://loaminoo.linkpc.net/2099097096096099/Dagboek-van-een-Manny-by-Holly-Peterson.pdf
    • http://loaminoo.linkpc.net/7093095094098094/Manny-s-Search-by-Edward-C-Burton.pdf
    • http://loaminoo.linkpc.net/7093095094097096/Manny-s-Motorcycle-Adventure-by-Susan-Amerikaner.pdf
    • http://loaminoo.linkpc.net/5091093099093/Outcry---Holocaust-memoirs-by-Manny-Steinberg.pdf
    • http://loaminoo.linkpc.net/1091094096092097093/Calico-Man---The-Manny-Kopp-Fabric-Collection-by-Bobbie-A-Aug.pdf
    • http://loaminoo.linkpc.net/7093095094097090/The-CSIRO-Total-Wellbeing-Diet-by-Manny-Noakes.pdf
    • http://loaminoo.linkpc.net/2092095097094096/If-Research-Were-Romance-and-Other-Implausible-Conjectures-by-Manny-Rayner.pdf
    • http://loaminoo.linkpc.net/4098099097094094/Caribbean-Moon-Manny-Williams-1-by-Rick-Murcer.pdf
    • http://loaminoo.linkpc.net/9095095090092092/Dolf-De-Roos-Real-Estate-Investor-s-College-Real-Estate-Investing-for-Everyone-Audio-Success-by-Dolf-de-Roos.pdf
    • http://loaminoo.linkpc.net/9094094091096096/The-Real-Estate-Agent-Redefined-by-Jim-Jaeckels.pdf
    • http://loaminoo.linkpc.net/5094099092095097/The-Millionaire-Real-Estate-Agent-by-Gary-Keller.pdf
    • http://loaminoo.linkpc.net/6099091096097096/Celeste-The-Real-Estate-Agent-by-Maddy-Madigan.pdf
    • http://loaminoo.linkpc.net/2099097096096099/

Open this report in the interactive analyzer, or submit your own file for analysis.