Malicious PDF — malware analysis report

Static analysis result for SHA-256 b175a328c44fcc00…

MALICIOUS

PDF

14.5 KB Created: 2019-04-30 05:04:10 +01:00 Authoring application: mPDF 5.7
MD5: d2feeb3910517891785d986a98c27543 SHA-1: 406272871f8d865881bdb4ee9c80f50f70921b98 SHA-256: b175a328c44fcc00f1e08449b902c2c6a1b7eab05b5ead2a882a0cb74c0e3830
90 Risk Score

Malware Insights

MITRE ATT&CK
T1059.001 PowerShell

The PDF was flagged by a machine learning classifier and contains a large number of external links, characteristic of a link farm. The embedded URLs point to various book titles, suggesting a lure to download potentially malicious content disguised as legitimate documents. No scripts were extracted, and the document body was heavily obfuscated, limiting further analysis of the exact payload.

Machine Learning

  • Nyx PDF Classifier malicious score 0.9891

Heuristics 2

  • Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM
    Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
  • Embedded URL info EMBEDDED_URL
    One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
    URL http://loaminoo.linkpc.net/1095092/That-Night-with-My-Best-Friend-s-Brother-One-Night-Stand-1-5-by-J-S-Cooper.pdf
    • http://loaminoo.linkpc.net/1097091095095092/That-Night-One-Night-Stand-0-5-by-J-S-Cooper.pdf
    • http://loaminoo.linkpc.net/4097099096097097/Falling-for-the-Billionaire-One-Night-Stand-4-by-J-S-Cooper.pdf
    • http://loaminoo.linkpc.net/3094099093098099/Falling-for-My-Boss-One-Night-Stand-3-by-J-S-Cooper.pdf
    • http://loaminoo.linkpc.net/2094095092099091/Steve-s-Last-One-Night-Stand-by-M-V-Gaius.pdf
    • http://loaminoo.linkpc.net/2091096097094098/Once-Upon-a-One-Night-Stand-Lover-1-by-D-N-Hoxa.pdf
    • http://loaminoo.linkpc.net/4096093095096094/One-Night-Stand-by-Cindy-Kirk.pdf
    • http://loaminoo.linkpc.net/1098097094092090/Night-Shield-amp-Night-Moves-Night-Tales-5-amp-6-by-Nora-Roberts.pdf
    • http://loaminoo.linkpc.net/1097090094092099/Night-with-a-Dom-1Night-Stand-96-by-Casea-Major.pdf
    • http://loaminoo.linkpc.net/2092099090092098/One-Night-Stand-with-a-Billionaire-by-Ayla-D-Viktoreva.pdf
    • http://loaminoo.linkpc.net/1091098090091097/Diary-of-a-One-Night-Stand-by-Alexandrea-Weis.pdf
    • http://loaminoo.linkpc.net/2095096095095096/Last-Night-Stand-Dance-Wars-4-by-Sophia-Titheniel.pdf
    • http://loaminoo.linkpc.net/1090093095098096095/Max-amp-Moritz-One-Night-Stand-mit-Folgen-by-Irina-Christmann-Ani-Rid.pdf
    • http://loaminoo.linkpc.net/3096098099091090/Two-Men-and-a-Virgin-1-Night-Stand-Series-by-Kate-Richards.pdf
    • http://loaminoo.linkpc.net/2090094091097095/My-One-Night-Stand-With-Cancer-A-Memoir-by-Tania-Katan.pdf
    • http://loaminoo.linkpc.net/1095098091090097/Short-Stories-for-the-Night-Stand-by-Debra-Wattes.pdf
    • http://loaminoo.linkpc.net/2097092097091092/His-for-the-Night-by-Helen-Cooper.pdf
    • http://loaminoo.linkpc.net/1091098098092096099/One-Night-With-a-Wolf-1Night-Stand-12-Johnson-Werewolves-1-by-Rebecca-Royce.pdf
    • http://loaminoo.linkpc.net/7096098094099/One-Night-at-the-Jacaranda-by-Carol-Cooper.pdf
    • http://loaminoo.linkpc.net/1091094091091098095/One-Night-Stand-So-bekommen-Sie-jede-Frau-am-selben-Abend-ins-Bett-by-Niccol-Santi.pdf
    • http://loaminoo.linkpc.net/10900930950

Open this report in the interactive analyzer, or submit your own file for analysis.