Malicious PDF — malware analysis report

Static analysis result for SHA-256 af43b30bc09853b3…

MALICIOUS

PDF

17.2 KB Created: 2019-04-30 04:21:03 +01:00 Authoring application: mPDF 5.7 First seen: 2021-02-23
MD5: b64f852ce77e063023d5615eed3b1bbc SHA-1: 34f3f2023c551071cc6a90585e4a008f78197a97 SHA-256: af43b30bc09853b33cd40d2d9ac49ae20639ee75da9e8c9fffbc84094b2ea638
92 Risk Score

Machine Learning

  • Nyx PDF Classifier malicious score 0.9925

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/4091097096094095/Wickedly-Magical-Baba-Yaga-0-5-by-Deborah-Blake.pdf In PDF document text
    • http://loaminoo.linkpc.net/5090094093098092/Wickedly-Ever-After-Baba-Yaga-2-5-by-Deborah-Blake.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3097095090094096/Baba-Yaga-by-Ernest-Small.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3098090096095098/Baba-Yaga-Laid-an-Egg-by-Dubravka-Ugre-i-.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2090092099096096/Baba-Yaga-and-Vasilisa-the-Brave-by-Marianna-Mayer.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3098091097091098/Baba-Yaga-A-Russian-Folktale-by-Eric-A-Kimmel.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1092096091091098/Vasilisa-the-Terrible-A-Baba-Yaga-Story-Midnight-Myths-and-Fairy-Tales-1-by-April-A-Taylor.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9099094095099096/Dangerously-Charming-Broken-Riders-1-by-Deborah-Blake.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4095092091098095/The-Goddess-is-in-the-Details-Wisdom-for-the-Everyday-Witch-by-Deborah-Blake.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4095092093091098/Everyday-Witch-A-to-Z-An-Amusing-Inspiring-amp-Informative-Guide-to-the-Wonderful-World-of-Witchcraft-by-Deborah-Blake.pdfIn PDF document text
    • http://loaminoo.linkpc.net/8094095092091090/The-Rubaiyat-of-Baba-Tahir-Oryan-of-Hamadan-by-Baba-Tahir.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3098097094097090/Veiled-Menace-Veiled-Magic-2-by-Deborah-Blake.pdfIn PDF document text
    • http://loaminoo.linkpc.net/9099097094092093/The-Magical-Unfolding-Eight-Magical-Processes-for-Peace-Potential-and-Purpose-by-Helen-Rebello.pdfIn PDF document text
    • http://loaminoo.linkpc.net/3094099092095093/A-Magical-Family-Holiday-Magical-Holidays-Book-1-by-Tirza-Schaefer.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1090097096093098/Hiren-s-Magical-Adventure-Magical-Adventures-1-by-Kathleen-Patel.pdfIn PDF document text
    • http://loaminoo.linkpc.net/2099093097094099/Magical-Sex-Magical-Sisters-1-by-Beverly-Rae.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1091099098097094/Wickedly-They-Dream-by-Cathrina-Constantine.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4094093091096090/His-Sleeping-Beau-Wickedly-Ever-After-2-by-Jess-Buffett.pdfIn PDF document text
    • http://loaminoo.linkpc.net/4091097094091090/Being-with-the-Brothers-Next-Door-Wickedly-Taboo-4-by-Jenika-Snow.pdfIn PDF document text
    • http://loaminoo.linkpc.net/1098094094094094/The-Wooden-Mile-Something-Wickedly-Weird-1-by-Chris-Mould.pdfIn PDF document text

Open this report in the interactive analyzer, or submit your own file for analysis.