PDF malware analysis — malicious · b1cff00e2035cd5f

MALICIOUS

PDF

23.3 KB Created: 2019-05-02 05:27:12 +01:00 Authoring application: mPDF 5.7

MD5: 2ca48bc93a5784d6c4bd5d5bc5c0cc9c SHA-1: 644fc72ca66021cf8b10dd58539e6c03b55803ab SHA-256: b1cff00e2035cd5f3ebd945b731294e4845f3ede051d732f6bfecdca271547c8

90 Risk Score

Malware Insights

MITRE ATT&CK

T1566.002 Spearphishing Attachment T1059.001 PowerShell

The PDF file was flagged by an ML classifier as malicious and contains a large number of embedded links, identified as a PDF_SEO_LINK_FARM heuristic. The document body is unreadable, but the presence of numerous links to external PDF files suggests a potential SEO poisoning or content redirection attack. No scripts were extracted from this sample.

Machine Learning

Nyx PDF Classifier malicious score 0.9901

Heuristics 2

Small PDF contains mass external PDF link farm critical PDF_SEO_LINK_FARM

Small PDF contains many clickable external PDF links, mostly clustered on one host. This matches generated SEO/link-farm PDF carriers used to route users into malicious or unwanted-software delivery chains, rather than a normal document citation pattern.
Embedded URL info EMBEDDED_URL

One or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.
URL http://loaminoo.l
- http://loaminoo.linkpc.net/2092091091092090/The-Wind-Is-My-Wine-by-Melissa-Stevens.pdf
- http://loaminoo.linkpc.net/8094091097093098/Directory-Department-Store-Wine-Shops-amp-Wine-Stores-In-Major-U-S-Cities-Section-H-Supplement-To-World-Wine-Almanac-amp-Wine-Atlas-Complete-Wine-Buying-Guide-amp-Catalogue-Of-Wine-Labels-by-Grace-Jane-Trebor.pdf
- http://loaminoo.linkpc.net/7091098091093/PAIRED-Champagne-amp-Sparkling-Wines-The-Food-amp-Wine-Matching-Recipe-Book-for-Everyone-by-David-Stevens-Castro.pdf
- http://loaminoo.linkpc.net/4093095094090096/Fight-Kitsune-2-by-Melissa-Stevens.pdf
- http://loaminoo.linkpc.net/3095092094095096/Change-Kitsune-1-by-Melissa-Stevens.pdf
- http://loaminoo.linkpc.net/1091094096093095097/Sips-The-Unsnooty-Book-of-Wine-The-Easy-Way-To-Be-Wine-Savvy-One-Sip-At-A-Time-by-Kenneth-Ohr.pdf
- http://loaminoo.linkpc.net/4090093090090095/Your-Breath-My-Wine-Wine-amp-Song-4-by-Eleanor-Kos.pdf
- http://loaminoo.linkpc.net/2092096092091091/Parker-s-Wine-Buyer-s-Guide-The-Complete-Easy-To-Use-Reference-on-Recent-Vintages-Prices-and-Ratings-for-More-Than-8-000-Wines-from-All-the-Major-Wine-Regions-by-Robert-M-Parker-Jr-.pdf
- http://loaminoo.linkpc.net/4094096091093/The-Wind-on-Fire-Trilogy-The-Wind-Singer-Slaves-of-the-Mastery-Firesong-by-William-Nicholson.pdf
- http://loaminoo.linkpc.net/1092095096096098/The-Wind-Singer-Wind-on-Fire-trilogy-1-by-William-Nicholson.pdf
- http://loaminoo.linkpc.net/4092091091094093/Melissa-Explains-It-All-Tales-from-My-Abnormally-Normal-Life-by-Melissa-Joan-Hart.pdf
- http://loaminoo.linkpc.net/4097096092092096/Crying-Wind-Beaten-Deserted-and-Afraid-of-Both-Death-and-Life-a-Young-Indian-Girl-Finds-Life-by-Crying-Wind.pdf
- http://loaminoo.linkpc.net/2097095095098091/Poems-Wallace-Stevens-by-Wallace-Stevens.pdf
- http://loaminoo.linkpc.net/3099093092098094/Letters-of-Wallace-Stevens-by-Wallace-Stevens.pdf
- http://loaminoo.linkpc.net/3092099091092095/The-Wind-Merchant-The-Wind-Merchant-1-by-Ryan-Dunlap.pdf
- http://loaminoo.linkpc.net/1090094094098093097/The-Melissa-Rauch-Handbook---Everything-You-Need-To-Know-About-Melissa-Rauch-by-Caleb-Kirk.pdf
- http://loaminoo.linkpc.net/1090094094098093099/The-Melissa-Rauch-Handbook---Everything-You-Need-to-Know-about-Melissa-Rauch-by-Emily-Smith.pdf
- http://loaminoo.linkpc.net/3093094090099095/Dandelion-Wine-by-Ray-Bradbury.pdf
- http://loaminoo.linkpc.net/3095098094096091/Dandelion-Wine-by-Ray-Bradbury.pdf
- http://loaminoo.linkpc.net/3099091092093099/Dandelion-Wine-by-Ray-Bradbury.pdf

Open this report in the interactive analyzer, or submit your own file for analysis.