Malicious PDF — malware analysis report

Static analysis result for SHA-256 b09d56f02448dd5a…

MALICIOUS

PDF

15.5 KB Created: 2019-05-07 03:20:01 +01:00 Authoring application: mPDF 5.7
MD5: f539fe0303eafa445046966601576afc SHA-1: 81bac703121760a998ab1b2b25c67a73d9637aae SHA-256: b09d56f02448dd5a2e69d02c4fa9a340dd6def1236867f27063af36255b9996f
90 Risk Score

Malware Insights

MITRE ATT&CK
T1566.002 Spearphishing Attachment T1204.002 Malicious File

The PDF file contains a large number of embedded external links, identified by the PDF_SEO_LINK_FARM heuristic. While most of these links are marked as benign, the sheer volume and the ML_NYX_PDF_MALICIOUS classification indicate a malicious intent, likely for SEO poisoning or to distribute further malware. No scripts were extracted from this sample.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9880

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/2095095097091/The-Lady-Travelers-Guide-to-Larceny-with-a-Dashing-Stranger-The-Lady-Travelers-Society-2-by-Victoria-Alexander.pdf
    • http://loaminoo.linkpc.net/2090094092094090/The-Lady-Travelers-Guide-to-Scoundrels-amp-Other-Gentlemen-The-Lady-Travelers-Society-1-by-Victoria-Alexander.pdf
    • http://loaminoo.linkpc.net/7091090094090091/Rest-Rabbit-Rest-by-Jacquelyn-Reinach.pdf
    • http://loaminoo.linkpc.net/7094094092094/Promises-to-Keep-by-Ann-Tatlock.pdf
    • http://loaminoo.linkpc.net/1091091096094094/A-Room-Of-My-Own-by-Ann-Tatlock.pdf
    • http://loaminoo.linkpc.net/9092093092092092/Things-We-Once-Held-Dear-by-Ann-Tatlock.pdf
    • http://loaminoo.linkpc.net/1097095095094098/The-Travelers-by-K-L-Kranes.pdf
    • http://loaminoo.linkpc.net/4093094096090/Parallel-Travelers-1-by-Claudia-Lefeve.pdf
    • http://loaminoo.linkpc.net/2098097098098096/Stowaway-Travelers-2-by-Becky-Black.pdf
    • http://loaminoo.linkpc.net/4092097099095097/Stowaway-Travelers-2-by-Becky-Black.pdf
    • http://loaminoo.linkpc.net/2094096096094097/The-Traveling-Man-The-Travelers-1-by-Michael-P-King.pdf
    • http://loaminoo.linkpc.net/1093094098098096/The-Travelers-Pendragon-Before-the-War-1-by-Carla-Jablonski.pdf
    • http://loaminoo.linkpc.net/3090092090096/Patalosh-The-Time-Travelers-by-Z-Altug.pdf
    • http://loaminoo.linkpc.net/8099091096099097/Watercolor-Sketching-for-Travelers-by-Peter-McReynolds.pdf
    • http://loaminoo.linkpc.net/7096099097090092/Travelers-Tales-Brazil-by-Annette-Haddad.pdf
    • http://loaminoo.linkpc.net/2098097094097090/Liar-s-Waltz-Travelers-1-by-Becky-Black.pdf
    • http://loaminoo.linkpc.net/1091090091093096097/The-International-Travelers-Guide-to-Bartering-by-Ian-Fasnacht.pdf
    • http://loaminoo.linkpc.net/4093098091095092/Travel-Guide-for-Budget-Travelers-by-Raul-Fattore.pdf
    • http://loaminoo.linkpc.net/4091098091095098/The-Travelers-Club-and-the-Ghost-Ship-by-Michael-Bradley.pdf
    • http://loaminoo.linkpc.net/4096098094093097/Chromeheart-Travelers-Series-Book-II-by-Alia-Hess.pdf
    • http://loaminoo.linkpc.net/4092097099095097/Stowa

Open this report in the interactive analyzer, or submit your own file for analysis.