Malicious PDF — malware analysis report

Static analysis result for SHA-256 adbf17e573a576f0…

MALICIOUS

PDF

16.9 KB Created: 2019-04-30 02:16:30 +01:00 Authoring application: mPDF 5.7
MD5: 291e3b46b7ee16d6a9a931d65762dd99 SHA-1: 5c9604e528d430c9af9a6898b49f7751dc0b1ec5 SHA-256: adbf17e573a576f02e45afef9595c1f36bb309de3330cbc12475dd24c9c308ef
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF contains a large number of embedded links, identified by the PDF_SEO_LINK_FARM heuristic. While many of these specific URLs are marked as benign, the sheer volume and structure suggest a malicious intent, likely for SEO poisoning or to distribute further malware. The ML classifier also strongly flagged this PDF as malicious. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3097091092093098/One-Sixth-of-a-Gill-by-Jean-Gill.pdf
    • http://loaminoo.linkpc.net/7096094091098098/B-telgeuse---tome-4---Les-cavernes-by-Leo.pdf
    • http://loaminoo.linkpc.net/7096094090094099/Betelgeuse-Bridge-by-William-Tenn.pdf
    • http://loaminoo.linkpc.net/1095093095095091/Molly-Saves-the-Day-A-Summer-Story-American-Girls-Molly-5-by-Valerie-Tripp.pdf
    • http://loaminoo.linkpc.net/1095093095096092/Molly-Learns-a-Lesson-A-School-Story-American-Girls-Molly-2-by-Valerie-Tripp.pdf
    • http://loaminoo.linkpc.net/6099098091096090/Unraveling-Molly-Molly-Luco-Story-1-by-Sophia-Derobe.pdf
    • http://loaminoo.linkpc.net/7096094090094097/Red-Eye-of-Betelgeuse-Perry-Rhodan---English-40-by-Clark-Darlton.pdf
    • http://loaminoo.linkpc.net/7096094091099093/Betelgeuse-english-version---volume-1---The-Survivors-by-Luiz-Eduardo-de-Oliveira-Leo-.pdf
    • http://loaminoo.linkpc.net/6095095091098098/Molly-s-Game-From-Hollywood-s-Elite-to-Wall-Street-s-Billionaire-Boys-Club-My-High-Stakes-Adventure-in-the-World-of-Underground-Poker-by-Molly-Bloom.pdf
    • http://loaminoo.linkpc.net/7091099095095096/Molly-O-Grady-s-Home-Run-The-N-Y-Bombers-Loses-the-World-Series-to-Its-Arch-Rival-But-Molly-Hits-the-Home-Run-for-Retirement-in-Sunny-Florida-by-Stephen-R-Champi.pdf
    • http://loaminoo.linkpc.net/2093097093094093/Meet-Molly-An-American-Girl-American-Girls-Molly-1-by-Valerie-Tripp.pdf
    • http://loaminoo.linkpc.net/5092091093094097/Molly-Miranda-Thief-for-Hire-Molly-Miranda-1-by-Jillianne-Hamilton.pdf
    • http://loaminoo.linkpc.net/1094091095098097/Nim-and-the-War-Effort-by-Milly-Lee.pdf
    • http://loaminoo.linkpc.net/2097093097093098/Here-Come-the-Boys-by-Milly-Johnson.pdf
    • http://loaminoo.linkpc.net/1090095092099099094/hi-My-nAMe-is-MiLLY-by-Heather-Zeissler.pdf
    • http://loaminoo.linkpc.net/1096098097095090/Wynter-s-Captive-by-Milly-Taiden.pdf
    • http://loaminoo.linkpc.net/3090096091098098/An-Autumn-Crush-by-Milly-Johnson.pdf
    • http://loaminoo.linkpc.net/3095096099095092/Paranormal-Nights-Vol-1-by-Milly-Taiden.pdf
    • http://loaminoo.linkpc.net/2099093098090094/Zip-amp-Milly-Big-Water-1-7-by-Alex-Valentine.pdf
    • http://loaminoo.linkpc.net/1091093093090093098/Where-Will-You-Swim-Tonight-by-Milly-Jane-Limmer.pdf
    • http://loaminoo.linkpc.net/7091099095095096/Molly-O-Grady-s-Home-Run-The-N-Y-

Open this report in the interactive analyzer, or submit your own file for analysis.