Malicious PDF — malware analysis report

Static analysis result for SHA-256 add2eaa825534194…

MALICIOUS

PDF

27.1 KB Created: 2019-04-30 06:05:37 +01:00 Authoring application: mPDF 5.7
MD5: 090091054e38bb7fa57ae8c44ddea7d2 SHA-1: 47b3395f60bcda5595407cbcceedca83aa0c086e SHA-256: add2eaa82553419490b208e0d630f8d81141fb96a526bd2dbb8785f53a92c190
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF contains a large number of embedded URLs, identified by the PDF_SEO_LINK_FARM heuristic. While many of these URLs are marked as benign, the sheer volume and the nature of the heuristic suggest a malicious intent, likely for SEO poisoning or to redirect users to potentially harmful sites. The ML_NYX_PDF_MALICIOUS heuristic further supports the malicious classification. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9908

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/3094094092097091/Tiny-People-in-Your-Semen-The-Discovery-of-Sperm-Funny-Learning-Series-Book-1-by-Caleb-J-Ross.pdf
    • http://loaminoo.linkpc.net/2091096097099097/Learning-To-Love-Again-A-Learning-Series-Book-3-by-Cynthia-P-O-39-Neill.pdf
    • http://loaminoo.linkpc.net/8093092093090091/Comedy-Writing-Secrets-The-Best-Selling-Book-on-How-to-Think-Funny-Write-Funny-Act-Funny-And-Get-Paid-For-It-by-Melvin-Helitzer.pdf
    • http://loaminoo.linkpc.net/3096099099090098/Learning-to-Let-Go-A-Learning-Series-Book-2-by-Cynthia-P-O-39-Neill.pdf
    • http://loaminoo.linkpc.net/3095093099099092/Stranger-Will-by-Caleb-J-Ross.pdf
    • http://loaminoo.linkpc.net/4091091098090092/As-a-Machine-and-Parts-by-Caleb-J-Ross.pdf
    • http://loaminoo.linkpc.net/8096097095098095/Gifts-from-Yggdrasil-A-Hero-Quest-for-Today-The-Creative-Learning-Series-Book-3-by-Ann-Miller.pdf
    • http://loaminoo.linkpc.net/5090093098091091/All-Kinds-of-Minds-A-Young-Student-s-Book-about-Learning-Abilities-and-Learning-Disorders-by-Mel-Levine.pdf
    • http://loaminoo.linkpc.net/9092097099095092/Bertha-Venation-And-Hundreds-of-Other-Funny-Names-of-Real-People-by-Larry-Ashmead.pdf
    • http://loaminoo.linkpc.net/2097091093090091/Ordinary-People-as-Monks-and-Mystics-Lifestyles-for-Self-discovery-by-Marsha-Sinetar.pdf
    • http://loaminoo.linkpc.net/8095093097098095/Caleb-s-Woman-Torrid-Tarot-Series-by-Eve-Vaughn.pdf
    • http://loaminoo.linkpc.net/1093093095097094/Orson-Scott-Card-Series-Reading-Order-amp-Checklist-Series-List-in-Order---Ender-Series-Formic-War-Series-Shadow-Series-Ender-Series-amp-Tales-of-Alvin-Maker-Series-Listabook-Series-Order-Book-15-by-Listabook.pdf
    • http://loaminoo.linkpc.net/1091094090090094094/Building-Bridges-to-the-Heart-of-Your-People-Strengths-and-Talents-Keys-to-Engagement-and-Participation-The-Bridges-Leadership-Series-Book-3-by-Leisa-Anslinger.pdf
    • http://loaminoo.linkpc.net/5094094098094098/Brandon-Mull-Series-Reading-Order-amp-Checklist-Series-List-in-Order---Five-Kingdom-Series-Fablehaven-Series-Beyonders-Trilogy-Candy-Shop-War-Series-Listabook-Series-Order-Book-24-by-Listabook.pdf
    • http://loaminoo.linkpc.net/6092091090095091/Know-Your-Children-as-They-Are-A-Book-for-Parents-by-Caleb-Gattegno.pdf
    • http://loaminoo.linkpc.net/7091096092099096/Maya-Banks-Series-Reading-Order-amp-Checklist-Series-List-in-Order---KGI-Series-Enforcers-Series-Slow-Burn-Series-amp-All-Other-Books-Listabook-Series-Order-Book-58-by-Listabook.pdf
    • http://loaminoo.linkpc.net/3097092096095092/Growing-Up-Tiny-Tiny-Titans-7-by-Art-Baltazar.pdf
    • http://loaminoo.linkpc.net/6092091091091092/Mathematics-with-Numbers-in-Colour-Book-VI-by-Caleb-Gattegno.pdf
    • http://loaminoo.linkpc.net/2098092096091091/Babies-Come-From-Where-Funny-Happens-When-Kids-Explain-Pregnancy-amp-Birth-Funny-Happens-3-by-Kristi-Porter.pdf
    • http://loaminoo.linkpc.net/5090091095097098/I-Found-This-Funny-My-Favorite-Pieces-of-Humor-and-Some-That-May-Not-Be-Funny-At-All-by-Judd-Apatow.pdf
    • http://loaminoo.linkpc.net/8096097095098095/Gifts-from-Yggdrasil-A-Hero-Quest-for-Tod

Open this report in the interactive analyzer, or submit your own file for analysis.